CVE-2017-6728

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary code at the root privilege level on an affected system, because of Incorrect Permissions. More Information: CSCvb99389. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.3.1.15i.BASE 6.2.3.1i.BASE 6.2.2.15i.BASE 6.1.4.10i.BASE.

• CWE-269

• http://www.securityfocus.com/bid/99464Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038821Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-iosVendor Advisory
• http://www.securityfocus.com/bid/99464Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038821Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-iosVendor Advisory

Published

Jul 10, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6721A vulnerability in the ingress processing of fragmented TCP …
• CVE-2017-6722A vulnerability in the Extensible Messaging and Presence Pro…
• CVE-2017-6724A vulnerability in the web framework code of Cisco Prime Inf…
• CVE-2017-6725A vulnerability in the web framework code of Cisco Prime Inf…
• CVE-2017-6726A vulnerability in the CLI of the Cisco Prime Network Gatewa…
• CVE-2017-6727A vulnerability in the Server Message Block (SMB) protocol o…
• CVE-2017-6729A vulnerability in the Border Gateway Protocol (BGP) process…
• CVE-2017-6730A vulnerability in the web-based GUI of Cisco Wide Area Appl…
• CVE-2017-6731A vulnerability in Multicast Source Discovery Protocol (MSDP…
• CVE-2017-6732A vulnerability in the installation procedure for Cisco Prim…
• CVE-2017-6733A vulnerability in the web-based application interface of th…
• CVE-2017-6734A vulnerability in the web-based management interface of Cis…