vulnwire
6.4med

CVE-2017-6606

A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted s…

Published 9 y ago · modified 4 mo ago · JSON

CVSS
6.4
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.5%
percentile 43%
Public exploits
0
none known

A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arbitrary commands on the underlying operating system with the privileges of the root user. More Information: CSCuz06639 CSCuz42122. Known Affected Releases: 15.6(1.1)S 16.1.2 16.2.0 15.2(1)E. Known Fixed Releases: Denali-16.1.3 16.2(1.8) 16.1(2.61) 15.6(2)SP 15.6(2)S1 15.6(1)S2 15.5(3)S3a 15.5(3)S3 15.5(2)S4 15.5(1)S4 15.4(3)S6a 15.4(3)S6 15.3(3)S8a 15.3(3)S8 15.2(5)E 15.2(4)E3 15.2(3)E5 15.0(2)SQD3 15.0(1.9.2)SQD3 3.9(0)E.

Exploit prediction (EPSS)

0.50% probability of exploitation in the next 30 days, higher than 43% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.06.4CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.06.9AV:L/AC:M/Au:N/C:C/I:C/A:C

Affected products

  • n/a Cisco IOS XE

Classification

Weakness
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command
Technology feeds
Cisco IOS (RSS, critical only)

References

  • tools.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-iosxe · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/97434 · vdb-entry, x_refsource_BID, x_transferred
  • securitytracker.com /id/1038190 · vdb-entry, x_refsource_SECTRACK, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.