What is the severity of CVE-2017-6666?

CVE-2017-6666 has been rated as critical due to its potential to cause denial of service on affected Cisco routers.

How do I fix CVE-2017-6666?

To mitigate CVE-2017-6666, upgrade the affected Cisco IOS XR Software to a version that contains the relevant security fixes.

Which Cisco products are affected by CVE-2017-6666?

CVE-2017-6666 affects various versions of Cisco IOS XR Software on Cisco Network Convergence System (NCS) 5500 Series Routers.

Can CVE-2017-6666 be exploited remotely?

CVE-2017-6666 requires local authentication, meaning it cannot be exploited remotely by unauthenticated attackers.

What impact does CVE-2017-6666 have on network operations?

Exploitation of CVE-2017-6666 can disrupt data traffic across Traffic Engineering tunnels, leading to significant downtime.

Vulnerability/
CVE-2017-6666

medium

13/6/2017

3/10/2019

CVE-2017-6666

First published: Tue Jun 13 2017(Updated: )

A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic Engineering (TE) tunnels, resulting in a denial of service (DoS) condition. More Information: CSCvd16665. Known Affected Releases: 6.2.11.BASE. Known Fixed Releases: 6.1.3 6.1.2 6.3.1.8i.BASE 6.2.11.8i.BASE 6.2.2.9i.BASE 6.1.32.11i.BASE 6.1.31.10i.BASE 6.1.4.3i.BASE.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco IOS XRv 9000	=6.0.0
Cisco IOS XRv 9000	=6.0.1
Cisco IOS XRv 9000	=6.0_base
Cisco IOS XRv 9000	=6.1.0
Cisco IOS XRv 9000	=6.1.1
Cisco IOS XRv 9000	=6.1.2
Cisco IOS XRv 9000	=6.1.3
Cisco IOS XRv 9000	=6.2.0
Cisco IOS XRv 9000	=6.2.1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2017-6666?
CVE-2017-6666 has been rated as critical due to its potential to cause denial of service on affected Cisco routers.
How do I fix CVE-2017-6666?
To mitigate CVE-2017-6666, upgrade the affected Cisco IOS XR Software to a version that contains the relevant security fixes.
Which Cisco products are affected by CVE-2017-6666?
CVE-2017-6666 affects various versions of Cisco IOS XR Software on Cisco Network Convergence System (NCS) 5500 Series Routers.
Can CVE-2017-6666 be exploited remotely?
CVE-2017-6666 requires local authentication, meaning it cannot be exploited remotely by unauthenticated attackers.
What impact does CVE-2017-6666 have on network operations?
Exploitation of CVE-2017-6666 can disrupt data traffic across Traffic Engineering tunnels, leading to significant downtime.

agent/severity
agent/references
agent/author
agent/type
agent/event
agent/tags
agent/description
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
collector/nvd-index
agent/software-canonical-lookup-request
vendor/cisco
canonical/cisco ios xrv 9000
version/cisco ios xrv 9000/6.0.0
version/cisco ios xrv 9000/6.0.1
version/cisco ios xrv 9000/6.0_base
version/cisco ios xrv 9000/6.1.0
version/cisco ios xrv 9000/6.1.1
version/cisco ios xrv 9000/6.1.2
version/cisco ios xrv 9000/6.1.3
version/cisco ios xrv 9000/6.2.0
version/cisco ios xrv 9000/6.2.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2017-6666?
CVE-2017-6666 has been rated as critical due to its potential to cause denial of service on affected Cisco routers.
How do I fix CVE-2017-6666?
To mitigate CVE-2017-6666, upgrade the affected Cisco IOS XR Software to a version that contains the relevant security fixes.
Which Cisco products are affected by CVE-2017-6666?
CVE-2017-6666 affects various versions of Cisco IOS XR Software on Cisco Network Convergence System (NCS) 5500 Series Routers.
Can CVE-2017-6666 be exploited remotely?
CVE-2017-6666 requires local authentication, meaning it cannot be exploited remotely by unauthenticated attackers.
What impact does CVE-2017-6666 have on network operations?
Exploitation of CVE-2017-6666 can disrupt data traffic across Traffic Engineering tunnels, leading to significant downtime.