CVE-2017-6719: A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute...

Security readout for executives and security teams

This issue lets someone who already has local authenticated CLI access on Cisco IOS XR run commands on the underlying operating system as root. It is not described as remote unauthenticated compromise, but it can turn limited device access into full control of affected network infrastructure. Exposure is likely limited to organizations running Cisco IOS XR, specifically the listed affected 6.2.1.BASE release. Risk depends heavily on who has local CLI access, whether accounts are shared, and whether affected routers remain unpatched. Treat this as high priority where affected IOS XR devices remain in production. It is most urgent on critical routing infrastructure or where many administrators, contractors, or shared accounts have CLI access. Mitigation focus: Upgrade affected IOS XR systems to a Cisco-listed fixed release.; Review Cisco advisory CSCvb99406 for platform-specific remediation guidance.; Restrict local CLI access to trusted administrative users only..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.