Cisco IOS XE Software CVE-2017-6664 Certificate Validation Security Bypass Vulnerability

Bugtraq ID:	99986
Class:	Input Validation Error
CVE:	CVE-2017-6664
Remote:	Yes
Local:	No
Published:	Jul 26 2017 12:00AM
Updated:	Jul 26 2017 12:00AM
Credit:	Cisco by Omar Eissa of ERNW.
Vulnerable:	Cisco Ios 16.2.1 Cisco Ios 15.5(1)S3.1
Not Vulnerable:

Cisco IOS XE Software CVE-2017-6664 Certificate Validation Security Bypass Vulnerability

Cisco IOS XE Software is prone to a security-bypass vulnerability.

An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks.

This issue is being tracked by Cisco Bug ID: CSCvd2232.

Cisco IOS XE Software CVE-2017-6664 Certificate Validation Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco IOS XE Software CVE-2017-6664 Certificate Validation Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Cisco IOS XE Software CVE-2017-6664 Certificate Validation Security Bypass Vulnerability

References:

• Cisco Homepage (Cisco)
  
• cisco-sa-20170726-anicrl:Cisco IOS XE Software Autonomic Networking Infrastructu (Cisco)