CVE-2017-6729

mediumPriorität · verfolgen · 31EPSS 0.023 · 83. PerzentilEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

2.30% (83rd) EPSS

CVSS 5 · medium

Is it mine?

54 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · cisco_csaf · nvd

EPSS · bewertet 2026-10-27

A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability affects the following products if they are running the Cisco StarOS operating system and BGP is enabled for the system: Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core Software. More Information: CSCvc44968. Known Affected Releases: 16.4.1 19.1.0 21.1.0 21.1.M0.65824. Known Fixed Releases: 21.3.A0.65902 21.2.A0.65905 21.1.b0.66164 21.1.V0.66014 21.1.R0.65898 21.1.M0.65894 21.1.0.66030 21.1.0.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenCisco ASR 5000 Series Softwarecisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9

v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.06.9mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.05.8mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Lsecondary · Cisco PSIRT US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-400USLLM-abgeleitet

betroffene Produkte (54)

Betroffene Produkte und Versionsbereiche.

Cisco Cisco ASR 5000 Series Softwarealle Versionencisco_csafUS
n/a Cisco StarOS≤ Cisco StarOSenisa_euvdEU
cisco asr 5000 software= 16.4.1nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 16.5.0nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 16.5.2nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.2.0nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.2.0.59184nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.3.0nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.3.1nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.3.9.62033nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.3_basenvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.7.0nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.7.5nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.0.0nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.0.0.57828nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.0.0.59167nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.0.0.59211nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.0.l0.59219nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.1.0nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.1.0.59776nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*

20 von 54 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

cisco-sa-20170705-starosCisco StarOS Border Gateway Protocol Process Denial of Service Vulnerability2017-07-05csaf · cisco_csafUS
A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper boundary controls for the BGP peering sessions list. An attacker could exploit this vulnerability by sending crafted TCP packets to an IPv4 or IPv6 interface on an affected system, if BGP is enabled for the system. By default, BGP is not enabled on the affected systems. There are no workarounds that address this vulnerability.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cisco_csaf nvd NVD CVE.org MITRE

veröffentlicht 2017-07-10geändert 2026-06-17

Referenzen (9)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan