Log in Start free

Actively exploited · Published Sep 7, 2017 · Assigned by cisco

CVE-2017-6627

High 7.5 Exploited

In plain English

A high-severity security flaw in Cisco IOS and Cisco IOS XE. Attackers are actively exploiting it in the wild (listed by CISA on March 3, 2022). The chance it is exploited in the next 30 days is estimated at 6.2% (higher than 94% of all known vulnerabilities). Apply updates per vendor instructions.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)6.2%top 6.5% of all CVEs
Exploited in the wildYesCISA KEV since Mar 3, 2022
Attack toolingNoneno public tooling known

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Mar 24, 2022.

Official description

A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and a denial of service (DoS) condition. The vulnerability is due to Cisco IOS Software application changes that create UDP sockets and leave the sockets idle without closing them. An attacker could exploit this vulnerability by sending UDP packets with a destination port of 0 to an affected device. A successful exploit could allow the attacker to cause UDP packets to be held in the input interfaces queue, resulting in a DoS condition. The input interface queue will stop holding UDP packets when it receives 250 packets. Cisco Bug IDs: CSCup10024, CSCva55744, CSCva95506.

Affected products (as reported)

VendorProductVersions
n/a Cisco IOS and Cisco IOS XE Cisco IOS and Cisco IOS XE

Weakness: CWE-399 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References