PT-2017-17177 · Cisco · Cisco Asr 903+1

Published 2017-04-07 · Updated 2019-10-03 · CVE-2017-6603

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco ASR 903 or ASR 920 Series Devices versions prior to 15.6(2)SP

Description A denial of service (DoS) condition can be caused on a targeted system due to incorrect IPv6 Packet Processing. This issue can be exploited by an unauthenticated, adjacent attacker.

Recommendations For versions prior to 15.6(2)SP, update to version 15.6(2)SP or 15.6(1.31)SP to resolve the issue.

Fix

Related Identifiers

CVE-2017-6603

Affected Products

Cisco Asr 903

Cisco Asr 920

References · 5

• https://osv.dev/vulnerability/CVE-2017-6603 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6603 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-asr · Vendor Advisory
• http://securityfocus.com/bid/97450 · Note
• http://securitytracker.com/id/1038185 · Note