CVE-2017-6718 Privilege escalation in Cisco IOS XR
An authenticated local attacker can elevate privileges to root level in Cisco IOS XR Software via the CLI.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-6718?
CVE-2017-6718 is a medium-severity vulnerability in Cisco Ios Xr, published on 4 Jul 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level. More Information: CSCvb99384. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.2.11.3i.ROUT 6.2.1.29i.ROUT 6.2.1.26i.ROUT.
Weakness: CWE-20
Which versions are affected by CVE-2017-6718?
It affects 1 product.
Products include Cisco Ios Xr.
How do I fix CVE-2017-6718?
No fix has been published for CVE-2017-6718 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-6718 being exploited?
There is no known exploitation of CVE-2017-6718 in the wild and no public exploit code.
Other vulnerabilities in Cisco Ios Xr
- CVE-2020-3118 Cisco IOS XR Software Discovery Protocol Format String
- CVE-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion
- CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion
- CVE-2010-3035 Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service
- CVE-2022-20821 Cisco IOS XR Open Port
Sources
Also known as GHSA-v223-xc7w-3v7p.