CVE-2017-6718: A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate...

Security readout for executives and security teams

CVE-2017-6718 is a Cisco IOS XR command-line flaw that could let a logged-in local user gain root-level control. Business urgency depends on whether any routing infrastructure still runs IOS XR 6.2.1.BASE. Root access on network devices can affect confidentiality, integrity, and availability. Exposure appears limited to environments running Cisco IOS XR Software 6.2.1.BASE with users who can authenticate locally to the CLI. The bundle does not identify affected device families, other versions, or a remote unauthenticated path. Treat this as high priority if IOS XR 6.2.1.BASE is present on production network infrastructure. The attacker must already have local authenticated access, but successful exploitation could give root control of critical routing systems. Mitigation focus: Inventory Cisco IOS XR versions across routing infrastructure.; Prioritize systems running IOS XR 6.2.1.BASE.; Upgrade affected systems to a Cisco-listed fixed release..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.