Lucene search
CiscoCISCO-SA-20170405-IOSXEHistoryApr 05, 2017 - 4:00 p.m.
Cisco IOS XE Software Startup Script Local Command Execution Vulnerability
2017-04-0516:00:00
tools.cisco.com
15
EPSS
0.001
Percentile
48.2%
A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arbitrary commands on the underlying operating system with the privileges of the root user.
The vulnerability is due to insufficient validation of ROMMON variables values. An attacker could exploit this vulnerability by manipulating the content of some ROMMON variables, which will allow an external script containing the command to execute at boot time. A reload of the affected system is needed to exploit the vulnerability. An attacker would need console access to exploit this vulnerability.
There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-iosxe [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-iosxe”]
Affected configurations
Node
ciscocisco_iosMatch3.2sgxe
ORciscocisco_iosMatch3.7sxe
ORciscocisco_iosMatch3.3sgxe
ORciscocisco_iosMatch3.8sxe
ORciscocisco_iosMatch3.9sxe
ORciscocisco_iosMatch3.2sexe
ORciscocisco_iosMatch3.3sexe
ORciscocisco_iosMatch3.3xoxe
ORciscocisco_iosMatch3.4sgxe
ORciscocisco_iosMatch3.5exe
ORciscocisco_iosMatch3.10sxe
ORciscocisco_iosMatch3.11sxe
ORciscocisco_iosMatch3.12sxe
ORciscocisco_iosMatch3.13sxe
ORciscocisco_iosMatch3.6exe
ORciscocisco_iosMatch3.14sxe
ORciscocisco_iosMatch3.15sxe
ORciscocisco_iosMatch3.3sqxe
ORciscocisco_iosMatch3.4sqxe
ORciscocisco_iosMatch3.7exe
ORciscocisco_iosMatch3.5sqxe
ORciscocisco_iosMatch3.16sxe
ORciscocisco_iosMatch3.17sxe
ORciscocisco_iosMatch16.1xe
ORciscocisco_iosMatch16.2xe
ORciscocisco_iosMatch3.8exe
ORciscocisco_iosMatch3.18sxe
ORciscocisco_iosMatch3.2.0sgxe
ORciscocisco_iosMatch3.2.1sgxe
ORciscocisco_iosMatch3.2.2sgxe
ORciscocisco_iosMatch3.2.3sgxe
ORciscocisco_iosMatch3.2.4sgxe
ORciscocisco_iosMatch3.2.5sgxe
ORciscocisco_iosMatch3.2.6sgxe
ORciscocisco_iosMatch3.2.7sgxe
ORciscocisco_iosMatch3.2.8sgxe
ORciscocisco_iosMatch3.2.9sgxe
ORciscocisco_iosMatch3.2.10sgxe
ORciscocisco_iosMatch3.2.11sgxe
ORciscocisco_iosMatch3.7.0sxe
ORciscocisco_iosMatch3.7.1sxe
ORciscocisco_iosMatch3.7.2sxe
ORciscocisco_iosMatch3.7.3sxe
ORciscocisco_iosMatch3.7.4sxe
ORciscocisco_iosMatch3.7.5sxe
ORciscocisco_iosMatch3.7.6sxe
ORciscocisco_iosMatch3.7.7sxe
ORciscocisco_iosMatch3.7.8sxe
ORciscocisco_iosMatch3.7.2tsxe
ORciscocisco_iosMatch3.7.0bsxe
ORciscocisco_iosMatch3.3.0sgxe
ORciscocisco_iosMatch3.3.2sgxe
ORciscocisco_iosMatch3.3.1sgxe
ORciscocisco_iosMatch3.8.0sxe
ORciscocisco_iosMatch3.8.1sxe
ORciscocisco_iosMatch3.8.2sxe
ORciscocisco_iosMatch3.9.1sxe
ORciscocisco_iosMatch3.9.0sxe
ORciscocisco_iosMatch3.9.2sxe
ORciscocisco_iosMatch3.2.0sexe
ORciscocisco_iosMatch3.2.1sexe
ORciscocisco_iosMatch3.2.2sexe
ORciscocisco_iosMatch3.2.3sexe
ORciscocisco_iosMatch3.3.0sexe
ORciscocisco_iosMatch3.3.1sexe
ORciscocisco_iosMatch3.3.2sexe
ORciscocisco_iosMatch3.3.3sexe
ORciscocisco_iosMatch3.3.4sexe
ORciscocisco_iosMatch3.3.5sexe
ORciscocisco_iosMatch3.3.0xoxe
ORciscocisco_iosMatch3.3.1xoxe
ORciscocisco_iosMatch3.3.2xoxe
ORciscocisco_iosMatch3.4.0sgxe
ORciscocisco_iosMatch3.4.2sgxe
ORciscocisco_iosMatch3.4.1sgxe
ORciscocisco_iosMatch3.4.3sgxe
ORciscocisco_iosMatch3.4.4sgxe
ORciscocisco_iosMatch3.4.5sgxe
ORciscocisco_iosMatch3.4.6sgxe
ORciscocisco_iosMatch3.4.7sgxe
ORciscocisco_iosMatch3.4.8sgxe
ORciscocisco_iosMatch3.5.0exe
ORciscocisco_iosMatch3.5.1exe
ORciscocisco_iosMatch3.5.2exe
ORciscocisco_iosMatch3.5.3exe
ORciscocisco_iosMatch3.10.0sxe
ORciscocisco_iosMatch3.10.1sxe
ORciscocisco_iosMatch3.10.2sxe
ORciscocisco_iosMatch3.10.3sxe
ORciscocisco_iosMatch3.10.4sxe
ORciscocisco_iosMatch3.10.5sxe
ORciscocisco_iosMatch3.10.6sxe
ORciscocisco_iosMatch3.10.1xcsxe
ORciscocisco_iosMatch3.10.2asxe
ORciscocisco_iosMatch3.10.2tsxe
ORciscocisco_iosMatch3.10.7sxe
ORciscocisco_iosMatch3.10.1xbsxe
ORciscocisco_iosMatch3.11.1sxe
ORciscocisco_iosMatch3.11.2sxe
ORciscocisco_iosMatch3.11.0sxe
ORciscocisco_iosMatch3.11.3sxe
ORciscocisco_iosMatch3.11.4sxe
ORciscocisco_iosMatch3.12.0sxe
ORciscocisco_iosMatch3.12.1sxe
ORciscocisco_iosMatch3.12.2sxe
ORciscocisco_iosMatch3.12.3sxe
ORciscocisco_iosMatch3.12.0asxe
ORciscocisco_iosMatch3.12.4sxe
ORciscocisco_iosMatch3.13.0sxe
ORciscocisco_iosMatch3.13.1sxe
ORciscocisco_iosMatch3.13.2sxe
ORciscocisco_iosMatch3.13.3sxe
ORciscocisco_iosMatch3.13.4sxe
ORciscocisco_iosMatch3.13.5sxe
ORciscocisco_iosMatch3.13.2asxe
ORciscocisco_iosMatch3.13.0asxe
ORciscocisco_iosMatch3.13.5asxe
ORciscocisco_iosMatch3.6.0exe
ORciscocisco_iosMatch3.6.1exe
ORciscocisco_iosMatch3.6.0aexe
ORciscocisco_iosMatch3.6.0bexe
ORciscocisco_iosMatch3.6.2aexe
ORciscocisco_iosMatch3.6.3exe
ORciscocisco_iosMatch3.6.4exe
ORciscocisco_iosMatch3.6.5exe
ORciscocisco_iosMatch3.6.6exe
ORciscocisco_iosMatch3.6.5aexe
ORciscocisco_iosMatch3.6.7exe
ORciscocisco_iosMatch3.14.0sxe
ORciscocisco_iosMatch3.14.1sxe
ORciscocisco_iosMatch3.14.2sxe
ORciscocisco_iosMatch3.14.3sxe
ORciscocisco_iosMatch3.15.0sxe
ORciscocisco_iosMatch3.15.1sxe
ORciscocisco_iosMatch3.15.2sxe
ORciscocisco_iosMatch3.15.1csxe
ORciscocisco_iosMatch3.15.3sxe
ORciscocisco_iosMatch3.3.0sqxe
ORciscocisco_iosMatch3.3.1sqxe
ORciscocisco_iosMatch3.4.0sqxe
ORciscocisco_iosMatch3.4.1sqxe
ORciscocisco_iosMatch3.7.0exe
ORciscocisco_iosMatch3.7.1exe
ORciscocisco_iosMatch3.7.2exe
ORciscocisco_iosMatch3.7.3exe
ORciscocisco_iosMatch3.7.4exe
ORciscocisco_iosMatch3.5.0sqxe
ORciscocisco_iosMatch3.5.1sqxe
ORciscocisco_iosMatch3.5.2sqxe
ORciscocisco_iosMatch3.16.0sxe
ORciscocisco_iosMatch3.16.1sxe
ORciscocisco_iosMatch3.16.0asxe
ORciscocisco_iosMatch3.16.1asxe
ORciscocisco_iosMatch3.16.2sxe
ORciscocisco_iosMatch3.16.2asxe
ORciscocisco_iosMatch3.16.0bsxe
ORciscocisco_iosMatch3.16.0csxe
ORciscocisco_iosMatch3.16.2bsxe
ORciscocisco_iosMatch3.17.0sxe
ORciscocisco_iosMatch3.17.1sxe
ORciscocisco_iosMatch3.17.1asxe
ORciscocisco_iosMatch16.1.1xe
ORciscocisco_iosMatch16.1.2xe
ORciscocisco_iosMatch16.2.1xe
ORciscocisco_iosMatch3.8.0exe
ORciscocisco_iosMatch3.8.1exe
ORciscocisco_iosMatch3.8.2exe
ORciscocisco_iosMatch3.18.0asxe
ORciscocisco_iosMatch3.18.0sxe
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | cisco_ios | 3.2sg | cpe:2.3:o:cisco:cisco_ios:3.2sg:xe:*:*:*:*:*:* |
| cisco | cisco_ios | 3.7s | cpe:2.3:o:cisco:cisco_ios:3.7s:xe:*:*:*:*:*:* |
| cisco | cisco_ios | 3.3sg | cpe:2.3:o:cisco:cisco_ios:3.3sg:xe:*:*:*:*:*:* |
| cisco | cisco_ios | 3.8s | cpe:2.3:o:cisco:cisco_ios:3.8s:xe:*:*:*:*:*:* |
| cisco | cisco_ios | 3.9s | cpe:2.3:o:cisco:cisco_ios:3.9s:xe:*:*:*:*:*:* |
| cisco | cisco_ios | 3.2se | cpe:2.3:o:cisco:cisco_ios:3.2se:xe:*:*:*:*:*:* |
| cisco | cisco_ios | 3.3se | cpe:2.3:o:cisco:cisco_ios:3.3se:xe:*:*:*:*:*:* |
| cisco | cisco_ios | 3.3xo | cpe:2.3:o:cisco:cisco_ios:3.3xo:xe:*:*:*:*:*:* |
| cisco | cisco_ios | 3.4sg | cpe:2.3:o:cisco:cisco_ios:3.4sg:xe:*:*:*:*:*:* |
| cisco | cisco_ios | 3.5e | cpe:2.3:o:cisco:cisco_ios:3.5e:xe:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2017-6606
2017-04-07 17:00:00
openvas
openvas
Cisco IOS XE Software Startup Script Local Command Execution Vulnerability
2017-04-07 00:00:00
prion
prion
Design/Logic Flaw
2017-04-07 17:59:00
nvd
nvd
CVE-2017-6606
2017-04-07 17:59:00
cve
cve
CVE-2017-6606
2017-04-07 17:59:00