CVE-2017-6627 is a denial-of-service vulnerability affecting Cisco IOS 15.1, 15.2, 15.4, and IOS XE 3.14-3.18. It stems from unclosed UDP sockets, allowing an unauthenticated, remote attacker to send UDP packets to destination port 0, causing an interface queue wedge. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity, leading to a complete loss of availability. This CVE is listed on CISA's KEV catalog, indicating active exploitation in the wild, despite a lack of public exploit code or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
15.1\(2\)gcCPE matchmatch criteria | cpe:2.3:o:cisco:ios:15.1\(2\)gc:*:*:*:*:*:*:* | ||
15.1\(2\)gc1CPE matchmatch criteria | cpe:2.3:o:cisco:ios:15.1\(2\)gc1:*:*:*:*:*:*:* | ||
15.1\(2\)gc2CPE matchmatch criteria | cpe:2.3:o:cisco:ios:15.1\(2\)gc2:*:*:*:*:*:*:* | ||
15.1\(4\)gcCPE matchmatch criteria | cpe:2.3:o:cisco:ios:15.1\(4\)gc:*:*:*:*:*:*:* | ||
15.1\(4\)gc1CPE matchmatch criteria | cpe:2.3:o:cisco:ios:15.1\(4\)gc1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.