CVE-2017-6666

A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic Engineering (TE) tunnels, resulting in a denial of service (DoS) condition. More Information: CSCvd16665. Known Affected Releases: 6.2.11.BASE. Known Fixed Releases: 6.1.3 6.1.2 6.3.1.8i.BASE 6.2.11.8i.BASE 6.2.2.9i.BASE 6.1.32.11i.BASE 6.1.31.10i.BASE 6.1.4.3i.BASE.

CVSS v3 6.0 MEDIUM
CVSS v2.0 1.9 LOW

6.0^/10

CVSS v3 : MEDIUM

Vector : AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Exploitability : 1.5 / Impact : 4.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

1.9^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 3.4 / Impact : 2.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/98987	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038630
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ncs	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:cisco:ios_xr:6.0.0:::::::*
	cpe:2.3:o:cisco:ios_xr:6.0.1:::::::*
	cpe:2.3:o:cisco:ios_xr:6.0_base:::::::*
	cpe:2.3:o:cisco:ios_xr:6.1.0:::::::*
	cpe:2.3:o:cisco:ios_xr:6.1.1:::::::*
	cpe:2.3:o:cisco:ios_xr:6.1.2:::::::*
	cpe:2.3:o:cisco:ios_xr:6.1.3:::::::*
	cpe:2.3:o:cisco:ios_xr:6.2.0:::::::*
	cpe:2.3:o:cisco:ios_xr:6.2.1:::::::*

History

No history.

Information

Published : 2017-06-13 06:29

Updated : 2023-12-10 12:15

NVD link : CVE-2017-6666

Mitre link : CVE-2017-6666

CVE.ORG link : CVE-2017-6666

JSON object : View

Products Affected

cisco

ios_xr

CWE

NVD-CWE-noinfo

{"id": "CVE-2017-6666", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 1.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 6.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 1.5}]}, "published": "2017-06-13T06:29:00.973", "references": [{"url": "http://www.securityfocus.com/bid/98987", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1038630", "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ncs", "tags": ["Mitigation", "Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic Engineering (TE) tunnels, resulting in a denial of service (DoS) condition. More Information: CSCvd16665. Known Affected Releases: 6.2.11.BASE. Known Fixed Releases: 6.1.3 6.1.2 6.3.1.8i.BASE 6.2.11.8i.BASE 6.2.2.9i.BASE 6.1.32.11i.BASE 6.1.31.10i.BASE 6.1.4.3i.BASE."}, {"lang": "es", "value": "Una vulnerabilidad en el componente de reenv\u00edo del software IOS XR de Cisco para Enrutadores Network Convergence System (NCS) 5500 Series de Cisco, podr\u00eda permitir a un atacante local identificado causar que el router deje de reenviar el tr\u00e1fico de datos por medio t\u00faneles de Ingenier\u00eda de Tr\u00e1fico (TE), resultando en una condici\u00f3n de denegaci\u00f3n de servicio (DoS). M\u00e1s informaci\u00f3n: CSCvd16665. Versiones Afectadas Conocidas: 6.2.11.BASE. Versiones Corregidas Conocidas: 6.1.3 6.1.2 6.3.1.8i.BASE 6.2.11.8i.BASE 6.2.2.9i. BASE 6.1.32.11i.BASE 6.1.31.10i.BASE 6.1.4.3i.BASE."}], "lastModified": "2019-10-03T00:03:26.223", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xr:6.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CC44668-FE9D-47CA-BFD9-BD721ADA9ADD"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9BE8485-444F-45E2-BBBB-B69BF322FEB7"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.0_base:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFF1497F-08C0-4064-9AB8-3ED2360F6710"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2C48F47-B3A9-42D5-8C87-111AEA5BD408"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52CC4093-80C1-4B0C-82D2-647C625FF42D"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0235F415-F327-4914-8E2A-96334984797D"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D093D77E-66E3-4659-820E-F7E03A51A83C"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C935351A-FC0E-4C83-B596-5A61865D0B43"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:6.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27A732BF-A723-48EA-AC0F-813CA5A2DB0F"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}