← Back to CVEs

CVE-2017-6627

HIGHCISA KEV

7.5

Description

A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and a denial of service (DoS) condition. The vulnerability is due to Cisco IOS Software application changes that create UDP sockets and leave the sockets idle without closing them. An attacker could exploit this vulnerability by sending UDP packets with a destination port of 0 to an affected device. A successful exploit could allow the attacker to cause UDP packets to be held in the input interfaces queue, resulting in a DoS condition. The input interface queue will stop holding UDP packets when it receives 250 packets. Cisco Bug IDs: CSCup10024, CSCva55744, CSCva95506.

CVE Details

CVSS v3.1 Score7.5

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published9/7/2017

Last Modified4/22/2026

Sourcekev

Honeypot Sightings0

CISA KEV

VendorCisco

ProductIOS and IOS XE Software

Vulnerability NameCisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability

KEV Date Added2022-03-03

Remediation Due Date2022-03-24

Ransomware UseUnknown

Affected Products

cisco:ioscisco:ios_xe

Weaknesses (CWE)

CWE-399CWE-404

References

http://www.securityfocus.com/bid/100644(psirt@cisco.com)

http://www.securitytracker.com/id/1039289(psirt@cisco.com)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-ios-udp(psirt@cisco.com)

http://www.securityfocus.com/bid/100644(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1039289(af854a3a-2127-422b-91ae-364da2661108)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-ios-udp(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6627(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.