Cisco IOS XE Software Startup Script Local Command Execution Vulnerability

🗓️ 05 Apr 2017 16:00:00Reported by CiscoType

cisco

cisco🔗 tools.cisco.com👁 36 Views

Cisco IOS XE Software startup script vulnerability allows unauthenticated local command executio

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the Cisco IOS operating system, allowing a perpetrator to execute arbitrary commands	20 Apr 201700:00	–	bdu_fstec
CNVD	Cisco IOS XE Software Local Command Execution Vulnerability	6 Apr 201700:00	–	cnvd
CVE	CVE-2017-6606	7 Apr 201717:00	–	cve
Cvelist	CVE-2017-6606	7 Apr 201717:00	–	cvelist
EUVD	EUVD-2017-15660	7 Oct 202500:30	–	euvd
NVD	CVE-2017-6606	7 Apr 201717:59	–	nvd
OpenVAS	Cisco IOS XE Software Startup Script Local Command Execution Vulnerability	7 Apr 201700:00	–	openvas
OSV	CVE-2017-6606	7 Apr 201717:59	–	osv
Prion	Design/Logic Flaw	7 Apr 201717:59	–	prion

Vulners

Node

cisco ios_xeMatch3.2.0sg

OR

cisco ios_xeMatch3.2.1sg

OR

cisco ios_xeMatch3.2.2sg

OR

cisco ios_xeMatch3.2.3sg

OR

cisco ios_xeMatch3.2.4sg

OR

cisco ios_xeMatch3.2.5sg

OR

cisco ios_xeMatch3.2.6sg

OR

cisco ios_xeMatch3.2.7sg

OR

cisco ios_xeMatch3.2.8sg

OR

cisco ios_xeMatch3.2.9sg

OR

cisco ios_xeMatch3.2.10sg

OR

cisco ios_xeMatch3.2.11sg

OR

cisco ios_xeMatch3.7.0s

OR

cisco ios_xeMatch3.7.1s

OR

cisco ios_xeMatch3.7.2s

OR

cisco ios_xeMatch3.7.3s

OR

cisco ios_xeMatch3.7.4s

OR

cisco ios_xeMatch3.7.5s

OR

cisco ios_xeMatch3.7.6s

OR

cisco ios_xeMatch3.7.7s

OR

cisco ios_xeMatch3.7.8s

OR

cisco ios_xeMatch3.7.2ts

OR

cisco ios_xeMatch3.7.0bs

OR

cisco ios_xeMatch3.3.0sg

OR

cisco ios_xeMatch3.3.2sg

OR

cisco ios_xeMatch3.3.1sg

OR

cisco ios_xeMatch3.8.0s

OR

cisco ios_xeMatch3.8.1s

OR

cisco ios_xeMatch3.8.2s

OR

cisco ios_xeMatch3.9.1s

OR

cisco ios_xeMatch3.9.0s

OR

cisco ios_xeMatch3.9.2s

OR

cisco ios_xeMatch3.2.0se

OR

cisco ios_xeMatch3.2.1se

OR

cisco ios_xeMatch3.2.2se

OR

cisco ios_xeMatch3.2.3se

OR

cisco ios_xeMatch3.3.0se

OR

cisco ios_xeMatch3.3.1se

OR

cisco ios_xeMatch3.3.2se

OR

cisco ios_xeMatch3.3.3se

OR

cisco ios_xeMatch3.3.4se

OR

cisco ios_xeMatch3.3.5se

OR

cisco ios_xeMatch3.3.0xo

OR

cisco ios_xeMatch3.3.1xo

OR

cisco ios_xeMatch3.3.2xo

OR

cisco ios_xeMatch3.4.0sg

OR

cisco ios_xeMatch3.4.2sg

OR

cisco ios_xeMatch3.4.1sg

OR

cisco ios_xeMatch3.4.3sg

OR

cisco ios_xeMatch3.4.4sg

OR

cisco ios_xeMatch3.4.5sg

OR

cisco ios_xeMatch3.4.6sg

OR

cisco ios_xeMatch3.4.7sg

OR

cisco ios_xeMatch3.4.8sg

OR

cisco ios_xeMatch3.5.0e

OR

cisco ios_xeMatch3.5.1e

OR

cisco ios_xeMatch3.5.2e

OR

cisco ios_xeMatch3.5.3e

OR

cisco ios_xeMatch3.10.0s

OR

cisco ios_xeMatch3.10.1s

OR

cisco ios_xeMatch3.10.2s

OR

cisco ios_xeMatch3.10.3s

OR

cisco ios_xeMatch3.10.4s

OR

cisco ios_xeMatch3.10.5s

OR

cisco ios_xeMatch3.10.6s

OR

cisco ios_xeMatch3.10.1xcs

OR

cisco ios_xeMatch3.10.2as

OR

cisco ios_xeMatch3.10.2ts

OR

cisco ios_xeMatch3.10.7s

OR

cisco ios_xeMatch3.10.1xbs

OR

cisco ios_xeMatch3.11.1s

OR

cisco ios_xeMatch3.11.2s

OR

cisco ios_xeMatch3.11.0s

OR

cisco ios_xeMatch3.11.3s

OR

cisco ios_xeMatch3.11.4s

OR

cisco ios_xeMatch3.12.0s

OR

cisco ios_xeMatch3.12.1s

OR

cisco ios_xeMatch3.12.2s

OR

cisco ios_xeMatch3.12.3s

OR

cisco ios_xeMatch3.12.0as

OR

cisco ios_xeMatch3.12.4s

OR

cisco ios_xeMatch3.13.0s

OR

cisco ios_xeMatch3.13.1s

OR

cisco ios_xeMatch3.13.2s

OR

cisco ios_xeMatch3.13.3s

OR

cisco ios_xeMatch3.13.4s

OR

cisco ios_xeMatch3.13.5s

OR

cisco ios_xeMatch3.13.2as

OR

cisco ios_xeMatch3.13.0as

OR

cisco ios_xeMatch3.13.5as

OR

cisco ios_xeMatch3.6.0e

OR

cisco ios_xeMatch3.6.1e

OR

cisco ios_xeMatch3.6.0ae

OR

cisco ios_xeMatch3.6.0be

OR

cisco ios_xeMatch3.6.2ae

OR

cisco ios_xeMatch3.6.3e

OR

cisco ios_xeMatch3.6.4e

OR

cisco ios_xeMatch3.6.5e

OR

cisco ios_xeMatch3.6.6e

OR

cisco ios_xeMatch3.6.5ae

OR

cisco ios_xeMatch3.6.7e

OR

cisco ios_xeMatch3.14.0s

OR

cisco ios_xeMatch3.14.1s

OR

cisco ios_xeMatch3.14.2s

OR

cisco ios_xeMatch3.14.3s

OR

cisco ios_xeMatch3.15.0s

OR

cisco ios_xeMatch3.15.1s

OR

cisco ios_xeMatch3.15.2s

OR

cisco ios_xeMatch3.15.1cs

OR

cisco ios_xeMatch3.15.3s

OR

cisco ios_xeMatch3.3.0sq

OR

cisco ios_xeMatch3.3.1sq

OR

cisco ios_xeMatch3.4.0sq

OR

cisco ios_xeMatch3.4.1sq

OR

cisco ios_xeMatch3.7.0e

OR

cisco ios_xeMatch3.7.1e

OR

cisco ios_xeMatch3.7.2e

OR

cisco ios_xeMatch3.7.3e

OR

cisco ios_xeMatch3.7.4e

OR

cisco ios_xeMatch3.5.0sq

OR

cisco ios_xeMatch3.5.1sq

OR

cisco ios_xeMatch3.5.2sq

OR

cisco ios_xeMatch3.16.0s

OR

cisco ios_xeMatch3.16.1s

OR

cisco ios_xeMatch3.16.0as

OR

cisco ios_xeMatch3.16.1as

OR

cisco ios_xeMatch3.16.2s

OR

cisco ios_xeMatch3.16.2as

OR

cisco ios_xeMatch3.16.0bs

OR

cisco ios_xeMatch3.16.0cs

OR

cisco ios_xeMatch3.16.2bs

OR

cisco ios_xeMatch3.17.0s

OR

cisco ios_xeMatch3.17.1s

OR

cisco ios_xeMatch3.17.1as

OR

cisco ios_xeMatch16.1.1

OR

cisco ios_xeMatch16.1.2

OR

cisco ios_xeMatch16.2.1

OR

cisco ios_xeMatch3.8.0e

OR

cisco ios_xeMatch3.8.1e

OR

cisco ios_xeMatch3.8.2e

OR

cisco ios_xeMatch3.18.0as

OR

cisco ios_xeMatch3.18.0s

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-iosxe

05 Apr 2017 16:00Current

6.9Medium risk

Vulners AI Score6.9

EPSS0.00503

cisco ios xe startup script vulnerability unauthenticated local command execution rommon root user system validation exploit console access ciscosecurityadvisory software