CVE-2017-6606
Summary
| CVE | CVE-2017-6606 |
|---|---|
| State | PUBLISHED |
| Assigner | cisco |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-04-07 17:59:00 UTC |
| Updated | 2025-04-20 01:37:25 UTC |
| Description | A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arbitrary commands on the underlying operating system with the privileges of the root user. More Information: CSCuz06639 CSCuz42122. Known Affected Releases: 15.6(1.1)S 16.1.2 16.2.0 15.2(1)E. Known Fixed Releases: Denali-16.1.3 16.2(1.8) 16.1(2.61) 15.6(2)SP 15.6(2)S1 15.6(1)S2 15.5(3)S3a 15.5(3)S3 15.5(2)S4 15.5(1)S4 15.4(3)S6a 15.4(3)S6 15.3(3)S8a 15.3(3)S8 15.2(5)E 15.2(4)E3 15.2(3)E5 15.0(2)SQD3 15.0(1.9.2)SQD3 3.9(0)E. |
Risk And Classification
Primary CVSS: v3.0 6.4 MEDIUM from [email protected]
CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Problem Types: CWE-78 | Command Execution Vulnerability
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 6.4 | MEDIUM | CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | [email protected] | Primary | 6.9 | AV:L/AC:M/Au:N/C:C/I:C/A:C |
CVSS v3.0 Breakdown
Attack Vector
PhysicalAttack Complexity
HighPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
MediumAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:L/AC:M/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Cisco | Ios Xe | 16.1.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.1.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.2.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 3.1.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.1.0sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.1.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.1.1sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.1.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.1.3s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.1.4as | All | All | All |
| Operating System | Cisco | Ios Xe | 3.1.4s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.10.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.10.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.10.1xbs | All | All | All |
| Operating System | Cisco | Ios Xe | 3.10.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.10.2ts | All | All | All |
| Operating System | Cisco | Ios Xe | 3.10.3s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.10.4s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.10.5s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.10.6s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.10.7s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.11.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.11.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.11.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.11.3s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.11.4s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.12.0as | All | All | All |
| Operating System | Cisco | Ios Xe | 3.12.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.12.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.12.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.12.3s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.12.4s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.13.0as | All | All | All |
| Operating System | Cisco | Ios Xe | 3.13.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.13.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.13.2as | All | All | All |
| Operating System | Cisco | Ios Xe | 3.13.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.13.3s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.13.4s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.13.5as | All | All | All |
| Operating System | Cisco | Ios Xe | 3.13.5s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.14.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.14.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.14.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.14.3s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.15.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.15.1cs | All | All | All |
| Operating System | Cisco | Ios Xe | 3.15.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.15.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.15.3s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.16.0cs | All | All | All |
| Operating System | Cisco | Ios Xe | 3.16.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.16.1as | All | All | All |
| Operating System | Cisco | Ios Xe | 3.16.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.16.2as | All | All | All |
| Operating System | Cisco | Ios Xe | 3.16.2bs | All | All | All |
| Operating System | Cisco | Ios Xe | 3.16.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.17.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.17.1as | All | All | All |
| Operating System | Cisco | Ios Xe | 3.17.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.18.0as | All | All | All |
| Operating System | Cisco | Ios Xe | 3.18.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.0se | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.0sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.0xo | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.10sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.11sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.1se | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.1sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.1xo | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.2se | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.2sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.3se | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.3sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.4sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.5sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.6sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.7sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.8sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.2.9sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.0se | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.0sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.0sq | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.0xo | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.1se | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.1sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.1sq | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.1xo | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.2se | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.2sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.2xo | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.3se | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.4se | All | All | All |
| Operating System | Cisco | Ios Xe | 3.3.5se | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.0as | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.0sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.0sq | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.1sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.1sq | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.2sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.3s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.3sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.4s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.4sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.5s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.5sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.6s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.6sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.7sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.4.8sg | All | All | All |
| Operating System | Cisco | Ios Xe | 3.5.0e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.5.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.5.0sq | All | All | All |
| Operating System | Cisco | Ios Xe | 3.5.1e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.5.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.5.1sq | All | All | All |
| Operating System | Cisco | Ios Xe | 3.5.2e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.5.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.5.2sq | All | All | All |
| Operating System | Cisco | Ios Xe | 3.5.3e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.6.0e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.6.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.6.1e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.6.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.6.2ae | All | All | All |
| Operating System | Cisco | Ios Xe | 3.6.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.6.3e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.6.4e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.6.5ae | All | All | All |
| Operating System | Cisco | Ios Xe | 3.6.5e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.6.6e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.6.7e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.0bs | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.0e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.1e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.2e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.2ts | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.3e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.3s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.4e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.4s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.5s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.6s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.7.7s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.8.0e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.8.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.8.1e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.8.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.8.2e | All | All | All |
| Operating System | Cisco | Ios Xe | 3.8.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.9.0s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.9.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 3.9.2s | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Na | Cisco IOS XE | affected Cisco IOS XE | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco IOS XE Software Startup Script Local Command Execution Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | tools.cisco.com | Vendor Advisory |
| Cisco IOS XE Software CVE-2017-6606 Local Command Execution Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Cisco IOS XE Console ROMMON Variable Validation Flaw Lets Physically Local Users Obtain Root Privileges - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.