Resource management flaw in Cisco IOS XE Software
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.
Summary
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read request that contains certain criteria for a specific object ID (OID) and an active crypto session is disconnected on an affected device. An attacker who can authenticate to an affected device could trigger this vulnerability by issuing an SNMP request for a specific OID on the device. A successful exploit will cause the device to restart due to an attempt to access an invalid memory region. The attacker does not control how or when crypto sessions are disconnected on the device. Cisco Bug IDs: CSCvb94392.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Cisco IOS XE Software | Cisco IOS XE Software | — | No fix listed | CNA |
- Cisco IOS XE Software Vendor— Affected Cisco IOS XE Software Fixed in — No fix listed CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:* | 3.16.0cs | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:* | 3.16.0s | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:* | 3.16.1as | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:* | 3.16.1s | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:* | 3.16.2s | Vulnerable | Cisco |
- cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:* Versions 3.16.0cs Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:* Versions 3.16.0s Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:* Versions 3.16.1as Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:* Versions 3.16.1s Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:* Versions 3.16.2s Vulnerable ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-6615
- 2026-10-03 Alias added: GHSA-w76g-6qc3-qpj6
References
More Cisco Ios Xe vulnerabilities
- TI-2023-06904 Cisco is providing an update for the ongoing investigation into observed exploitation of… KEVCVSS 3.1CRITICAL 10.0
- TI-2018-00122 Memory corruption in Cisco IOS and IOS XE KEVCVSS 3.1CRITICAL 9.8
- TI-2017-02977 Improper input validation in Cisco IOS and IOS XE Software KEVCVSS 3.1CRITICAL 9.8
- TI-2018-00135 Memory corruption in Cisco IOS, IOS XE, and IOS XR KEVCVSS 3.1HIGH 8.8
- TI-2017-04498 Memory corruption in Cisco IOS KEVCVSS 3.1HIGH 8.8
- TI-2017-04497 Memory corruption in Cisco IOS XE Software KEVCVSS 3.1HIGH 8.8
Sources
- CVE-2017-6615 · CVE Program
- CVE-2017-6615 · NVD
- FIRST EPSS
- GHSA-w76g-6qc3-qpj6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences