How severe is CVE-2017-6627?

CVE-2017-6627 has a CVSS 3.1 base score of 7.5 (HIGH). EPSS estimates a 6.2% probability of exploitation in the next 30 days. It is listed in the CISA Known Exploited Vulnerabilities catalog.

CVE-2017-6627: Cisco IOS Software and Cisco IOS XE Software UDP

CISA Known Exploited Vulnerabilities

Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.

Added to KEV

2022-03-03

Remediation due

2022-03-24

Required action
Apply updates per vendor instructions.

CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2017-6627

Description

A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and a denial of service (DoS) condition. The vulnerability is due to Cisco IOS Software application changes that create UDP sockets and leave the sockets idle without closing them. An attacker could exploit this vulnerability by sending UDP packets with a destination port of 0 to an affected device. A successful exploit could allow the attacker to cause UDP packets to be held in the input interfaces queue, resulting in a DoS condition. The input interface queue will stop holding UDP packets when it receives 250 packets. Cisco Bug IDs: CSCup10024, CSCva55744, CSCva95506.

Severity

CVSS 3.1 · CISA7.5 HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC · CISA-ADP

Exploitationactive

Automatableyes

Technical impactpartial

Affected Products

Vendor	Product	Affected versions
-	Cisco IOS and Cisco IOS XE	Cisco IOS and Cisco IOS XE

References

3 Links

Vulnerability databases

Other references

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-ios-udp

Record Details

Published

2017-09-07

Last updated

2025-10-21

Assigner (CNA)

cisco

Credited to

Related Tool Categories

Tool categories that test for or protect against this vulnerability class.

CWE-399 · Resource Management Errors

Fuzzing

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.