CVE-2017-6606: OS Command Injection

First published: Fri Apr 07 2017(Updated: )

A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arbitrary commands on the underlying operating system with the privileges of the root user. More Information: CSCuz06639 CSCuz42122. Known Affected Releases: 15.6(1.1)S 16.1.2 16.2.0 15.2(1)E. Known Fixed Releases: Denali-16.1.3 16.2(1.8) 16.1(2.61) 15.6(2)SP 15.6(2)S1 15.6(1)S2 15.5(3)S3a 15.5(3)S3 15.5(2)S4 15.5(1)S4 15.4(3)S6a 15.4(3)S6 15.3(3)S8a 15.3(3)S8 15.2(5)E 15.2(4)E3 15.2(3)E5 15.0(2)SQD3 15.0(1.9.2)SQD3 3.9(0)E.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco IOS XE	=3.1.0s
Cisco IOS XE	=3.1.0sg
Cisco IOS XE	=3.1.1s
Cisco IOS XE	=3.1.1sg
Cisco IOS XE	=3.1.2s
Cisco IOS XE	=3.1.3s
Cisco IOS XE	=3.1.4as
Cisco IOS XE	=3.1.4s
Cisco IOS XE	=3.2.0se
Cisco IOS XE	=3.2.0sg
Cisco IOS XE	=3.2.0xo
Cisco IOS XE	=3.2.1s
Cisco IOS XE	=3.2.1se
Cisco IOS XE	=3.2.1sg
Cisco IOS XE	=3.2.1xo
Cisco IOS XE	=3.2.2s
Cisco IOS XE	=3.2.2se
Cisco IOS XE	=3.2.2sg
Cisco IOS XE	=3.2.3se
Cisco IOS XE	=3.2.3sg
Cisco IOS XE	=3.2.4sg
Cisco IOS XE	=3.2.5sg
Cisco IOS XE	=3.2.6sg
Cisco IOS XE	=3.2.7sg
Cisco IOS XE	=3.2.8sg
Cisco IOS XE	=3.2.9sg
Cisco IOS XE	=3.2.10sg
Cisco IOS XE	=3.2.11sg
Cisco IOS XE	=3.3.0s
Cisco IOS XE	=3.3.0se
Cisco IOS XE	=3.3.0sg
Cisco IOS XE	=3.3.0sq
Cisco IOS XE	=3.3.0xo
Cisco IOS XE	=3.3.1s
Cisco IOS XE	=3.3.1se
Cisco IOS XE	=3.3.1sg
Cisco IOS XE	=3.3.1sq
Cisco IOS XE	=3.3.1xo
Cisco IOS XE	=3.3.2s
Cisco IOS XE	=3.3.2se
Cisco IOS XE	=3.3.2sg
Cisco IOS XE	=3.3.2xo
Cisco IOS XE	=3.3.3se
Cisco IOS XE	=3.3.4se
Cisco IOS XE	=3.3.5se
Cisco IOS XE	=3.4.0as
Cisco IOS XE	=3.4.0s
Cisco IOS XE	=3.4.0sg
Cisco IOS XE	=3.4.0sq
Cisco IOS XE	=3.4.1s
Cisco IOS XE	=3.4.1sg
Cisco IOS XE	=3.4.1sq
Cisco IOS XE	=3.4.2s
Cisco IOS XE	=3.4.2sg
Cisco IOS XE	=3.4.3s
Cisco IOS XE	=3.4.3sg
Cisco IOS XE	=3.4.4s
Cisco IOS XE	=3.4.4sg
Cisco IOS XE	=3.4.5s
Cisco IOS XE	=3.4.5sg
Cisco IOS XE	=3.4.6s
Cisco IOS XE	=3.4.6sg
Cisco IOS XE	=3.4.7sg
Cisco IOS XE	=3.4.8sg
Cisco IOS XE	=3.5.0e
Cisco IOS XE	=3.5.0s
Cisco IOS XE	=3.5.0sq
Cisco IOS XE	=3.5.1e
Cisco IOS XE	=3.5.1s
Cisco IOS XE	=3.5.1sq
Cisco IOS XE	=3.5.2e
Cisco IOS XE	=3.5.2s
Cisco IOS XE	=3.5.2sq
Cisco IOS XE	=3.5.3e
Cisco IOS XE	=3.6.0e
Cisco IOS XE	=3.6.0s
Cisco IOS XE	=3.6.1e
Cisco IOS XE	=3.6.1s
Cisco IOS XE	=3.6.2ae
Cisco IOS XE	=3.6.2s
Cisco IOS XE	=3.6.3e
Cisco IOS XE	=3.6.4e
Cisco IOS XE	=3.6.5ae
Cisco IOS XE	=3.6.5e
Cisco IOS XE	=3.6.6e
Cisco IOS XE	=3.6.7e
Cisco IOS XE	=3.7.0bs
Cisco IOS XE	=3.7.0e
Cisco IOS XE	=3.7.0s
Cisco IOS XE	=3.7.1e
Cisco IOS XE	=3.7.1s
Cisco IOS XE	=3.7.2e
Cisco IOS XE	=3.7.2s
Cisco IOS XE	=3.7.2ts
Cisco IOS XE	=3.7.3e
Cisco IOS XE	=3.7.3s
Cisco IOS XE	=3.7.4e
Cisco IOS XE	=3.7.4s
Cisco IOS XE	=3.7.5s
Cisco IOS XE	=3.7.6s
Cisco IOS XE	=3.7.7s
Cisco IOS XE	=3.8.0e
Cisco IOS XE	=3.8.0s
Cisco IOS XE	=3.8.1e
Cisco IOS XE	=3.8.1s
Cisco IOS XE	=3.8.2e
Cisco IOS XE	=3.8.2s
Cisco IOS XE	=3.9.0s
Cisco IOS XE	=3.9.1s
Cisco IOS XE	=3.9.2s
Cisco IOS XE	=3.10.0s
Cisco IOS XE	=3.10.1s
Cisco IOS XE	=3.10.1xbs
Cisco IOS XE	=3.10.2s
Cisco IOS XE	=3.10.2ts
Cisco IOS XE	=3.10.3s
Cisco IOS XE	=3.10.4s
Cisco IOS XE	=3.10.5s
Cisco IOS XE	=3.10.6s
Cisco IOS XE	=3.10.7s
Cisco IOS XE	=3.11.0s
Cisco IOS XE	=3.11.1s
Cisco IOS XE	=3.11.2s
Cisco IOS XE	=3.11.3s
Cisco IOS XE	=3.11.4s
Cisco IOS XE	=3.12.0as
Cisco IOS XE	=3.12.0s
Cisco IOS XE	=3.12.1s
Cisco IOS XE	=3.12.2s
Cisco IOS XE	=3.12.3s
Cisco IOS XE	=3.12.4s
Cisco IOS XE	=3.13.0as
Cisco IOS XE	=3.13.0s
Cisco IOS XE	=3.13.1s
Cisco IOS XE	=3.13.2as
Cisco IOS XE	=3.13.2s
Cisco IOS XE	=3.13.3s
Cisco IOS XE	=3.13.4s
Cisco IOS XE	=3.13.5as
Cisco IOS XE	=3.13.5s
Cisco IOS XE	=3.14.0s
Cisco IOS XE	=3.14.1s
Cisco IOS XE	=3.14.2s
Cisco IOS XE	=3.14.3s
Cisco IOS XE	=3.15.0s
Cisco IOS XE	=3.15.1cs
Cisco IOS XE	=3.15.1s
Cisco IOS XE	=3.15.2s
Cisco IOS XE	=3.15.3s
Cisco IOS XE	=3.16.0cs
Cisco IOS XE	=3.16.0s
Cisco IOS XE	=3.16.1as
Cisco IOS XE	=3.16.1s
Cisco IOS XE	=3.16.2as
Cisco IOS XE	=3.16.2bs
Cisco IOS XE	=3.16.2s
Cisco IOS XE	=3.17.0s
Cisco IOS XE	=3.17.1as
Cisco IOS XE	=3.17.1s
Cisco IOS XE	=3.18.0as
Cisco IOS XE	=3.18.0s
Cisco IOS XE	=16.1.1
Cisco IOS XE	=16.1.2
Cisco IOS XE	=16.2.1

Never miss a vulnerability like this again

Reference Links

collector/nvd-index
agent/references
agent/weakness
agent/type
agent/event
agent/severity
agent/author
agent/description
agent/tags
agent/first-publish-date
agent/softwarecombine
agent/last-modified-date
vendor/cisco
canonical/cisco ios xe
version/cisco ios xe/3.1.0s
version/cisco ios xe/3.1.0sg
version/cisco ios xe/3.1.1s
version/cisco ios xe/3.1.1sg
version/cisco ios xe/3.1.2s
version/cisco ios xe/3.1.3s
version/cisco ios xe/3.1.4as
version/cisco ios xe/3.1.4s
version/cisco ios xe/3.2.0se
version/cisco ios xe/3.2.0sg
version/cisco ios xe/3.2.0xo
version/cisco ios xe/3.2.1s
version/cisco ios xe/3.2.1se
version/cisco ios xe/3.2.1sg
version/cisco ios xe/3.2.1xo
version/cisco ios xe/3.2.2s
version/cisco ios xe/3.2.2se
version/cisco ios xe/3.2.2sg
version/cisco ios xe/3.2.3se
version/cisco ios xe/3.2.3sg
version/cisco ios xe/3.2.4sg
version/cisco ios xe/3.2.5sg
version/cisco ios xe/3.2.6sg
version/cisco ios xe/3.2.7sg
version/cisco ios xe/3.2.8sg
version/cisco ios xe/3.2.9sg
version/cisco ios xe/3.2.10sg
version/cisco ios xe/3.2.11sg
version/cisco ios xe/3.3.0s
version/cisco ios xe/3.3.0se
version/cisco ios xe/3.3.0sg
version/cisco ios xe/3.3.0sq
version/cisco ios xe/3.3.0xo
version/cisco ios xe/3.3.1s
version/cisco ios xe/3.3.1se
version/cisco ios xe/3.3.1sg
version/cisco ios xe/3.3.1sq
version/cisco ios xe/3.3.1xo
version/cisco ios xe/3.3.2s
version/cisco ios xe/3.3.2se
version/cisco ios xe/3.3.2sg
version/cisco ios xe/3.3.2xo
version/cisco ios xe/3.3.3se
version/cisco ios xe/3.3.4se
version/cisco ios xe/3.3.5se
version/cisco ios xe/3.4.0as
version/cisco ios xe/3.4.0s
version/cisco ios xe/3.4.0sg
version/cisco ios xe/3.4.0sq
version/cisco ios xe/3.4.1s
version/cisco ios xe/3.4.1sg
version/cisco ios xe/3.4.1sq
version/cisco ios xe/3.4.2s
version/cisco ios xe/3.4.2sg
version/cisco ios xe/3.4.3s
version/cisco ios xe/3.4.3sg
version/cisco ios xe/3.4.4s
version/cisco ios xe/3.4.4sg
version/cisco ios xe/3.4.5s
version/cisco ios xe/3.4.5sg
version/cisco ios xe/3.4.6s
version/cisco ios xe/3.4.6sg
version/cisco ios xe/3.4.7sg
version/cisco ios xe/3.4.8sg
version/cisco ios xe/3.5.0e
version/cisco ios xe/3.5.0s
version/cisco ios xe/3.5.0sq
version/cisco ios xe/3.5.1e
version/cisco ios xe/3.5.1s
version/cisco ios xe/3.5.1sq
version/cisco ios xe/3.5.2e
version/cisco ios xe/3.5.2s
version/cisco ios xe/3.5.2sq
version/cisco ios xe/3.5.3e
version/cisco ios xe/3.6.0e
version/cisco ios xe/3.6.0s
version/cisco ios xe/3.6.1e
version/cisco ios xe/3.6.1s
version/cisco ios xe/3.6.2ae
version/cisco ios xe/3.6.2s
version/cisco ios xe/3.6.3e
version/cisco ios xe/3.6.4e
version/cisco ios xe/3.6.5ae
version/cisco ios xe/3.6.5e
version/cisco ios xe/3.6.6e
version/cisco ios xe/3.6.7e
version/cisco ios xe/3.7.0bs
version/cisco ios xe/3.7.0e
version/cisco ios xe/3.7.0s
version/cisco ios xe/3.7.1e
version/cisco ios xe/3.7.1s
version/cisco ios xe/3.7.2e
version/cisco ios xe/3.7.2s
version/cisco ios xe/3.7.2ts
version/cisco ios xe/3.7.3e
version/cisco ios xe/3.7.3s
version/cisco ios xe/3.7.4e
version/cisco ios xe/3.7.4s
version/cisco ios xe/3.7.5s
version/cisco ios xe/3.7.6s
version/cisco ios xe/3.7.7s
version/cisco ios xe/3.8.0e
version/cisco ios xe/3.8.0s
version/cisco ios xe/3.8.1e
version/cisco ios xe/3.8.1s
version/cisco ios xe/3.8.2e
version/cisco ios xe/3.8.2s
version/cisco ios xe/3.9.0s
version/cisco ios xe/3.9.1s
version/cisco ios xe/3.9.2s
version/cisco ios xe/3.10.0s
version/cisco ios xe/3.10.1s
version/cisco ios xe/3.10.1xbs
version/cisco ios xe/3.10.2s
version/cisco ios xe/3.10.2ts
version/cisco ios xe/3.10.3s
version/cisco ios xe/3.10.4s
version/cisco ios xe/3.10.5s
version/cisco ios xe/3.10.6s
version/cisco ios xe/3.10.7s
version/cisco ios xe/3.11.0s
version/cisco ios xe/3.11.1s
version/cisco ios xe/3.11.2s
version/cisco ios xe/3.11.3s
version/cisco ios xe/3.11.4s
version/cisco ios xe/3.12.0as
version/cisco ios xe/3.12.0s
version/cisco ios xe/3.12.1s
version/cisco ios xe/3.12.2s
version/cisco ios xe/3.12.3s
version/cisco ios xe/3.12.4s
version/cisco ios xe/3.13.0as
version/cisco ios xe/3.13.0s
version/cisco ios xe/3.13.1s
version/cisco ios xe/3.13.2as
version/cisco ios xe/3.13.2s
version/cisco ios xe/3.13.3s
version/cisco ios xe/3.13.4s
version/cisco ios xe/3.13.5as
version/cisco ios xe/3.13.5s
version/cisco ios xe/3.14.0s
version/cisco ios xe/3.14.1s
version/cisco ios xe/3.14.2s
version/cisco ios xe/3.14.3s
version/cisco ios xe/3.15.0s
version/cisco ios xe/3.15.1cs
version/cisco ios xe/3.15.1s
version/cisco ios xe/3.15.2s
version/cisco ios xe/3.15.3s
version/cisco ios xe/3.16.0cs
version/cisco ios xe/3.16.0s
version/cisco ios xe/3.16.1as
version/cisco ios xe/3.16.1s
version/cisco ios xe/3.16.2as
version/cisco ios xe/3.16.2bs
version/cisco ios xe/3.16.2s
version/cisco ios xe/3.17.0s
version/cisco ios xe/3.17.1as
version/cisco ios xe/3.17.1s
version/cisco ios xe/3.18.0as
version/cisco ios xe/3.18.0s
version/cisco ios xe/16.1.1
version/cisco ios xe/16.1.2
version/cisco ios xe/16.2.1

CVE-2017-6606: OS Command Injection

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact