Strix
26.1K

CVE-2017-6729

UnknownEPSS 2.30%

Last modified

CVE-2017-6729 is a vulnerability of currently unknown severity. A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability affects the following products if they are running the Cisco StarOS operating system and BGP is enabled for the system: Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core Software. EPSS estimates a 2.30% chance of exploitation in the next 30 days.

Description

A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability affects the following products if they are running the Cisco StarOS operating system and BGP is enabled for the system: Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core Software. More Information: CSCvc44968. Known Affected Releases: 16.4.1 19.1.0 21.1.0 21.1.M0.65824. Known Fixed Releases: 21.3.A0.65902 21.2.A0.65905 21.1.b0.66164 21.1.V0.66014 21.1.R0.65898 21.1.M0.65894 21.1.0.66030 21.1.0.

Metrics

EPSS Probability
2.30%

81.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
CiscoAsr 5000 Software16.4.1
CiscoAsr 5000 Software16.5.0
CiscoAsr 5000 Software16.5.2
CiscoAsr 5000 Software17.2.0
CiscoAsr 5000 Software17.2.0.59184
CiscoAsr 5000 Software17.3.0
CiscoAsr 5000 Software17.3.1
CiscoAsr 5000 Software17.3.9.62033
CiscoAsr 5000 Software17.3_base
CiscoAsr 5000 Software17.7.0
CiscoAsr 5000 Software17.7.5
CiscoAsr 5000 Software18.0.0
CiscoAsr 5000 Software18.0.0.57828
CiscoAsr 5000 Software18.0.0.59167
CiscoAsr 5000 Software18.0.0.59211
CiscoAsr 5000 Software18.0.l0.59219
CiscoAsr 5000 Software18.1.0
CiscoAsr 5000 Software18.1.0.59776
CiscoAsr 5000 Software18.1.0.59780
CiscoAsr 5000 Software18.1_base
CiscoAsr 5000 Software18.3.0
CiscoAsr 5000 Software18.3_base
CiscoAsr 5000 Software18.4.0
CiscoAsr 5000 Software19.0.1
CiscoAsr 5000 Software19.0.m0.60737
CiscoAsr 5000 Software19.0.m0.60828
CiscoAsr 5000 Software19.0.m0.61045
CiscoAsr 5000 Software19.1.0
CiscoAsr 5000 Software19.1.0.61559
CiscoAsr 5000 Software19.2.0
CiscoAsr 5000 Software19.3.0
CiscoAsr 5000 Software19.6.3
CiscoAsr 5000 Software19.6_base
CiscoAsr 5000 Software20.0.0
CiscoAsr 5000 Software20.0.1.0
CiscoAsr 5000 Software20.0.1.a0
CiscoAsr 5000 Software20.0.1.v0
CiscoAsr 5000 Software20.0.2.3
CiscoAsr 5000 Software20.0.2.3.65026
CiscoAsr 5000 Software20.0.2.v1
CiscoAsr 5000 Software20.0.m0.62842
CiscoAsr 5000 Software20.0.m0.63229
CiscoAsr 5000 Software20.0.v0
CiscoAsr 5000 Software20.1.v2
CiscoAsr 5000 Software20.1_base
CiscoAsr 5000 Software20.2.12
CiscoAsr 5000 Software20.2_base
CiscoAsr 5000 Software21.0.0
CiscoAsr 5000 Software21.0.v1
CiscoAsr 5000 Software21.0_base

Showing 50 of 52 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2017-6729?
A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability affects the following products if they are running the Cisco StarOS operating system and BGP is enabled for the system: Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core Software. More Information: CSCvc44968. Known Affected Releases: 16.4.1 19.1.0 21.1.0 21.1.M0.65824. Known Fixed Releases: 21.3.A0.65902 21.2.A0.65905 21.1.b0.66164 21.1.V0.66014 21.1.R0.65898 21.1.M0.65894 21.1.0.66030 21.1.0.
How severe is CVE-2017-6729?
Severity scoring for CVE-2017-6729 is pending analysis. The EPSS model estimates a 2.30% probability of exploitation in the next 30 days.
How do I fix CVE-2017-6729?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-6729?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST