CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2017-66277.5/HIGHEPSS 6.2%CISA KEV
2017-09-07

Cisco IOS and IOS XE UDP Processing Vulnerability: Remote Denial of Service (DoS) Analysis and Mitigation Guide (CVE-2017-6627)

[Affected Scope] Cisco IOS 15.1, 15.2, 15.4 and IOS XE versions 3.14 through 3.18.

[Impact] An unauthenticated, remote attacker can send UDP packets with a destination port of 0 to cause an interface queue wedge, leading to a complete Denial of Service (DoS) condition.

[Mitigation] Upgrade to the latest recommended Cisco IOS/IOS XE software releases, or implement Infrastructure Access Control Lists (iACLs) to drop UDP packets targeting destination port 0.

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse