CVE-2017-6666

MediumCVSS 6.0/10Last modified Jun 17, 2026

Description

A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic Engineering (TE) tunnels, resulting in a denial of service (DoS) condition. More Information: CSCvd16665. Known Affected Releases: 6.2.11.BASE. Known Fixed Releases: 6.1.3 6.1.2 6.3.1.8i.BASE 6.2.11.8i.BASE 6.2.2.9i.BASE 6.1.32.11i.BASE 6.1.31.10i.BASE 6.1.4.3i.BASE.

Metrics

CVSS 3.0 6.0/10CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
n/a	Cisco Network Convergence System 5500 Series Routers	Cisco Network Convergence System 5500 Series Routers

References

http://www.securityfocus.com/bid/98987Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038630
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ncsMitigation, Vendor Advisory
http://www.securityfocus.com/bid/98987Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038630
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ncsMitigation, Vendor Advisory

Timeline

Published: Jun 13, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-66679.8A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (SDK) could allow an un CVE-2017-66684.9Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to CVE-2017-66697.8Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files. An att CVE-2017-66706.1A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redir CVE-2017-66717.5A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthentica CVE-2017-66727.5A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers throug CVE-2017-66736.5A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information. An attacker c CVE-2017-66747.5A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote at CVE-2017-66756.1A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a refle CVE-2017-66787.5A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software 1 CVE-2017-66796.4The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto init CVE-2017-66807.5A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create