CVEvulnerability
CVE-2017-6728
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-07-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-269
Description
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary code at the root privilege level on an affected system, because of Incorrect Permissions. More Information: CSCvb99389. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.3.1.15i.BASE 6.2.3.1i.BASE 6.2.2.15i.BASE 6.1.4.10i.BASE.
Affected configurations
• cisco ios xr
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- http://www.securityfocus.com/bid/99464 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038821 Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-ios Vendor Advisory
- http://www.securityfocus.com/bid/99464 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038821 Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-ios Vendor Advisory