CVE-2017-6627

HIGH

7.5

CVSS Score

Published: September 7, 2017 at 09:00 PM UTC

Updated: June 17, 2026 at 01:22 AM UTC

2 products affected across 1 vendorIOSIOS Xe

Using Cisco IOS and Cisco IOS XE by N/A?

Get instant alerts when new vulnerabilities affect Cisco IOS and Cisco IOS XE - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploitation

CISA KEV

Exploit prediction

EPSS 6%

SSVC

Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score6.2%

EPSS (Exploit Prediction Scoring System) estimates a 6.2% chance this CVE is exploited in the wild within the next 30 days — higher than 93% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

A vulnerability in the UDP processing code of Cisco IOS and IOS XE could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and denial of service.

Required Action

Apply updates per vendor instructions.

Ransomware Use

Unknown

Added to KEV

Mar 3, 2022

Remediation Due

Mar 24, 2022

1678 days overdue

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-6627

Description

A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and a denial of service (DoS) condition. The vulnerability is due to Cisco IOS Software application changes that create UDP sockets and leave the sockets idle without closing them. An attacker could exploit this vulnerability by sending UDP packets with a destination port of 0 to an affected device. A successful exploit could allow the attacker to cause UDP packets to be held in the input interfaces queue, resulting in a DoS condition. The input interface queue will stop holding UDP packets when it receives 250 packets. Cisco Bug IDs: CSCup10024, CSCva55744, CSCva95506.