Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2017-6729: Cisco ASR 5000 routers and VPC can lose BGP service
CVE-2017-6729 · published 9 years ago
Summary
The software that runs on Cisco ASR 5000 routers and Cisco Virtualized Packet Core can be forced to restart its BGP process by anyone on the network, causing the routing function to stop. This results in a loss of network connectivity for the affected devices. Update to one of the listed fixed software releases to prevent the interruption.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | asr_5000_software |
16.4.1 16.5.0 16.5.2 17.2.0 17.2.0.59184 17.3.0 17.3.1 17.3.9.62033 17.3_base 17.7.0 17.7.5 18.0.0 40 more version ranges
cpe:2.3:a:cisco:asr_5000_software:16.4.1:*:*:*:*:*:*:* |
Original advisory text
A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software...
A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability affects the following products if they are running the Cisco StarOS operating system and BGP is enabled for the system: Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core Software. More Information: CSCvc44968. Known Affected Releases: 16.4.1 19.1.0 21.1.0 21.1.M0.65824. Known Fixed Releases: 21.3.A0.65902 21.2.A0.65905 21.1.b0.66164 21.1.V0.66014 21.1.R0.65898 21.1.M0.65894 21.1.0.66030 21.1.0.
References
- http://www.securityfocus.com/bid/100015 Third Party Advisory VDB Entry
- http://www.securitytracker.com/id/1038819 Third Party Advisory VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2... Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published10 Jul 2017
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2017-6729 · NVD
Track software like this
Free during beta