CVE-2017-6719: Command Injection
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with root privileges, aka Command Injection. More Information: CSCvb99406. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.2.1.28i.BASE 6.2.1.22i.BASE 6.1.32.8i.BASE 6.1.31.3i.BASE 6.1.3.10i.BASE.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6719?
CVE-2017-6719 is considered a high severity vulnerability due to the potential for remote command execution with root privileges.
How do I fix CVE-2017-6719?
To fix CVE-2017-6719, upgrade to a fixed release such as 6.2.1.28i or later.
What types of devices are affected by CVE-2017-6719?
CVE-2017-6719 affects devices running Cisco IOS XR Software versions such as 6.0.2 and its derivatives.
Who can exploit CVE-2017-6719?
CVE-2017-6719 can be exploited by authenticated, local attackers on affected Cisco devices.
What impact does CVE-2017-6719 have on Cisco devices?
CVE-2017-6719 allows attackers to execute arbitrary commands on the host operating system, potentially compromising device integrity.