CVE Feed

    Dashboard / CVE / CVE-2017-6603

    CVE-2017-6603

    A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on a targeted system because of incorrect IPv6 Packet Processing. More Information: CSCuy94366. Known Affected Releases: 15.4(3)S3.15. Known Fixed Releases: 15.6(2)SP 15.6(1.31)SP.

    Published:Apr 7, 2017
    Last Modified:Apr 20, 2025
    EPS:Apr 7, 2017
    EPSS Score:0.00342
    CVSS Score:6.5

    Affected Products

    Vendor
    Cisco
    Product
    Asr-920-12cz-a
    Vendor
    Cisco
    Product
    Asr-920-12cz-d
    Vendor
    Cisco
    Product
    Asr-920-12sz-im
    Vendor
    Cisco
    Product
    Asr-920-24sz-im
    Vendor
    Cisco
    Product
    Asr-920-24sz-m
    Vendor
    Cisco
    Product
    Asr-920-24tz-m
    Vendor
    Cisco
    Product
    Asr-920-4sz-a
    Vendor
    Cisco
    Product
    Asr-920-4sz-d
    Vendor
    Cisco
    Product
    Asr 900 Series Firmware
    Vendor
    Cisco
    Product
    Asr 903

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-20919 (CVSS 8.6) — A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco…
    CVE-2022-20848 (CVSS 8.6) — A vulnerability in the UDP processing functionality of Cisco IOS XE Software for Embedded Wireless Controllers…
    CVE-2020-3524 (CVSS 6.8) — A vulnerability in the Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco 4000 Series Integrated Services Ro…
    CVE-2019-1649 (CVSS 6.7) — A vulnerability in the logic that handles access control to one of the hardware components in Cisco's propriet…
    CVE-2017-6795 (CVSS 4.4) — A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Ser…
    CVE-2017-3859 (CVSS 7.5) — A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation S…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High