CVE-2017-6729

mediumpriority · track · 31EPSS 0.023 · 83 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

2.30% (83rd) EPSS

CVSS 5 · medium

Is it mine?

54 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · cisco_csaf · nvd

EPSS · scored 2026-10-27

A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability affects the following products if they are running the Cisco StarOS operating system and BGP is enabled for the system: Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core Software. More Information: CSCvc44968. Known Affected Releases: 16.4.1 19.1.0 21.1.0 21.1.M0.65824. Known Fixed Releases: 21.3.A0.65902 21.2.A0.65905 21.1.b0.66164 21.1.V0.66014 21.1.R0.65898 21.1.M0.65894 21.1.0.66030 21.1.0.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedCisco ASR 5000 Series Softwarecisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 2.9

v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.06.9mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.05.8mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Lsecondary · Cisco PSIRT US

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-400USLLM-inferred

affected products (54)

Products and version ranges known to be affected.

Cisco Cisco ASR 5000 Series Softwareall versionscisco_csafUS
n/a Cisco StarOS≤ Cisco StarOSenisa_euvdEU
cisco asr 5000 software= 16.4.1nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 16.5.0nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 16.5.2nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.2.0nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.2.0.59184nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.3.0nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.3.1nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.3.9.62033nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.3_basenvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.7.0nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 17.7.5nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.0.0nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.0.0.57828nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.0.0.59167nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.0.0.59211nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.0.l0.59219nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.1.0nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*
cisco asr 5000 software= 18.1.0.59776nvdUScpe:2.3:a:cisco:asr_5000_software:*:*:*:*:*:*:*:*

showing 20 of 54

advisories (1)

Vendor and ecosystem advisories describing this.

cisco-sa-20170705-starosCisco StarOS Border Gateway Protocol Process Denial of Service Vulnerability2017-07-05csaf · cisco_csafUS
A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper boundary controls for the BGP peering sessions list. An attacker could exploit this vulnerability by sending crafted TCP packets to an IPv4 or IPv6 interface on an affected system, if BGP is enabled for the system. By default, BGP is not enabled on the affected systems. There are no workarounds that address this vulnerability.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cisco_csaf nvd NVD CVE.org MITRE

published 2017-07-10modified 2026-06-17

references (9)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan