PT-2017-17228 · Cisco · Cisco Ios Xr

Publicado 2017-06-07 · Atualizado 2019-10-03 · CVE-2017-6666

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers version 6.2.11.BASE

Description A vulnerability in the forwarding component could allow an authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic Engineering (TE) tunnels, resulting in a denial of service (DoS) condition. The issue occurs because adjacency information for a Traffic Engineering (TE) tunnel's physical source interface is not propagated to hardware after the adjacency is lost. An attacker could exploit this by issuing the clear arp-cache command after logging in to the router's CLI with administrator privileges.

Recommendations For Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers version 6.2.11.BASE, update to a fixed release such as 6.1.3, 6.1.2, 6.3.1.8i.BASE, 6.2.11.8i.BASE, 6.2.2.9i.BASE, 6.1.32.11i.BASE, 6.1.31.10i.BASE, or 6.1.4.3i.BASE to resolve the issue. As a temporary workaround, consider restricting access to the clear arp-cache command to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2017-6666

Produtos afetados

Cisco Ios Xr

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-6666 · Aviso do Fabricante
• http://securityfocus.com/bid/98987 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-6666 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ncs · Aviso do Fabricante
• http://securitytracker.com/id/1038630 · Nota