CVE-2017-6603
First published: Fri Apr 07 2017(Updated: )
A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on a targeted system because of incorrect IPv6 Packet Processing. More Information: CSCuy94366. Known Affected Releases: 15.4(3)S3.15. Known Fixed Releases: 15.6(2)SP 15.6(1.31)SP.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco ASR 900 Series Firmware | =15.4\(3\)s3.15 | |
| Cisco ASR 920-12CZ-A | ||
| Cisco ASR 920 Series Router | ||
| Cisco ASR 920 Series | ||
| Cisco ASR 920 | ||
| Cisco ASR 920 Series Router | ||
| Cisco ASR 920-24TZ-M | ||
| Cisco ASR 920-4SZ-A | ||
| Cisco ASR 920-4SZ-D | ||
| Cisco ASR 903 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-6603?
CVE-2017-6603 is classified as a high severity vulnerability due to its potential to cause a denial of service (DoS) condition.
How do I fix CVE-2017-6603?
To remediate CVE-2017-6603, you should upgrade to a fixed version of the Cisco ASR 900 Series Software that addresses this vulnerability.
Which Cisco devices are affected by CVE-2017-6603?
CVE-2017-6603 specifically affects Cisco ASR 903 and ASR 920 Series Devices running with an RSP2 card.
What is the impact of CVE-2017-6603?
The impact of CVE-2017-6603 is that an unauthenticated, adjacent attacker could trigger a denial of service condition on the vulnerable system.
Is CVE-2017-6603 remote or local access required for exploitation?
CVE-2017-6603 requires adjacent network access by an unauthenticated attacker for exploitation.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/event
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco asr 900 series firmware
- version/cisco asr 900 series firmware/15.4\(3\)s3.15
- canonical/cisco asr 920-12cz-a
- canonical/cisco asr 920
- canonical/cisco asr 920 series
- canonical/cisco asr 920 series router
- canonical/cisco asr 920-24tz-m
- canonical/cisco asr 920-4sz-a
- canonical/cisco asr 920-4sz-d
- canonical/cisco asr 903