CVE-2017-6729
Last modified
CVE-2017-6729 is a vulnerability of currently unknown severity. A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability affects the following products if they are running the Cisco StarOS operating system and BGP is enabled for the system: Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core Software. EPSS estimates a 2.30% chance of exploitation in the next 30 days.
Description
A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability affects the following products if they are running the Cisco StarOS operating system and BGP is enabled for the system: Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core Software. More Information: CSCvc44968. Known Affected Releases: 16.4.1 19.1.0 21.1.0 21.1.M0.65824. Known Fixed Releases: 21.3.A0.65902 21.2.A0.65905 21.1.b0.66164 21.1.V0.66014 21.1.R0.65898 21.1.M0.65894 21.1.0.66030 21.1.0.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Asr 5000 Software | 16.4.1 |
| Cisco | Asr 5000 Software | 16.5.0 |
| Cisco | Asr 5000 Software | 16.5.2 |
| Cisco | Asr 5000 Software | 17.2.0 |
| Cisco | Asr 5000 Software | 17.2.0.59184 |
| Cisco | Asr 5000 Software | 17.3.0 |
| Cisco | Asr 5000 Software | 17.3.1 |
| Cisco | Asr 5000 Software | 17.3.9.62033 |
| Cisco | Asr 5000 Software | 17.3_base |
| Cisco | Asr 5000 Software | 17.7.0 |
| Cisco | Asr 5000 Software | 17.7.5 |
| Cisco | Asr 5000 Software | 18.0.0 |
| Cisco | Asr 5000 Software | 18.0.0.57828 |
| Cisco | Asr 5000 Software | 18.0.0.59167 |
| Cisco | Asr 5000 Software | 18.0.0.59211 |
| Cisco | Asr 5000 Software | 18.0.l0.59219 |
| Cisco | Asr 5000 Software | 18.1.0 |
| Cisco | Asr 5000 Software | 18.1.0.59776 |
| Cisco | Asr 5000 Software | 18.1.0.59780 |
| Cisco | Asr 5000 Software | 18.1_base |
| Cisco | Asr 5000 Software | 18.3.0 |
| Cisco | Asr 5000 Software | 18.3_base |
| Cisco | Asr 5000 Software | 18.4.0 |
| Cisco | Asr 5000 Software | 19.0.1 |
| Cisco | Asr 5000 Software | 19.0.m0.60737 |
| Cisco | Asr 5000 Software | 19.0.m0.60828 |
| Cisco | Asr 5000 Software | 19.0.m0.61045 |
| Cisco | Asr 5000 Software | 19.1.0 |
| Cisco | Asr 5000 Software | 19.1.0.61559 |
| Cisco | Asr 5000 Software | 19.2.0 |
| Cisco | Asr 5000 Software | 19.3.0 |
| Cisco | Asr 5000 Software | 19.6.3 |
| Cisco | Asr 5000 Software | 19.6_base |
| Cisco | Asr 5000 Software | 20.0.0 |
| Cisco | Asr 5000 Software | 20.0.1.0 |
| Cisco | Asr 5000 Software | 20.0.1.a0 |
| Cisco | Asr 5000 Software | 20.0.1.v0 |
| Cisco | Asr 5000 Software | 20.0.2.3 |
| Cisco | Asr 5000 Software | 20.0.2.3.65026 |
| Cisco | Asr 5000 Software | 20.0.2.v1 |
| Cisco | Asr 5000 Software | 20.0.m0.62842 |
| Cisco | Asr 5000 Software | 20.0.m0.63229 |
| Cisco | Asr 5000 Software | 20.0.v0 |
| Cisco | Asr 5000 Software | 20.1.v2 |
| Cisco | Asr 5000 Software | 20.1_base |
| Cisco | Asr 5000 Software | 20.2.12 |
| Cisco | Asr 5000 Software | 20.2_base |
| Cisco | Asr 5000 Software | 21.0.0 |
| Cisco | Asr 5000 Software | 21.0.v1 |
| Cisco | Asr 5000 Software | 21.0_base |
Showing 50 of 52 affected configurations. See NVD for the full list.
References
- http://www.securityfocus.com/bid/100015Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038819Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/100015Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038819Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-6729?
How severe is CVE-2017-6729?
How do I fix CVE-2017-6729?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-6722A vulnerability in the Extensible Messaging and Presence Pro…
- CVE-2017-6724A vulnerability in the web framework code of Cisco Prime Inf…
- CVE-2017-6725A vulnerability in the web framework code of Cisco Prime Inf…
- CVE-2017-6726A vulnerability in the CLI of the Cisco Prime Network Gatewa…
- CVE-2017-6727A vulnerability in the Server Message Block (SMB) protocol o…
- CVE-2017-6728A vulnerability in the CLI of Cisco IOS XR Software could al…
- CVE-2017-6730A vulnerability in the web-based GUI of Cisco Wide Area Appl…
- CVE-2017-6731A vulnerability in Multicast Source Discovery Protocol (MSDP…
- CVE-2017-6732A vulnerability in the installation procedure for Cisco Prim…
- CVE-2017-6733A vulnerability in the web-based application interface of th…
- CVE-2017-6734A vulnerability in the web-based management interface of Cis…
- CVE-2017-6735A vulnerability in the backup and restore functionality of C…
Are you affected by CVE-2017-6729?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
