CVE-2017-6627

KEV

Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability

Vendor / Project: Cisco
Product: IOS and IOS XE Software
Date added: Mar 3, 2022
Due date: Mar 24, 2022
Known ransomware use: Unknown
CWEs: CWE-399

Description

A vulnerability in the UDP processing code of Cisco IOS and IOS XE could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and denial of service.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-6627