CVE-2017-6728: A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute...

Security readout for executives and security teams

This Cisco IOS XR issue lets an authenticated local CLI user run code as root on an affected network device. The business risk is highest where multiple administrators, contractors, or automation accounts have shell or CLI access to routers running the affected release. Likely exposure is limited to Cisco IOS XR devices on affected software, especially release 6.2.1.BASE, where users have authenticated local CLI access. Internet exposure alone is not indicated by the sources. Prioritize remediation for core routing or service-provider infrastructure where local CLI access is shared. The issue is not reported as actively exploited here, but root-level impact on network devices makes delayed patching risky. Mitigation focus: Upgrade affected systems to one of Cisco's listed fixed IOS XR releases.; Review Cisco advisory CSCvb99389 for exact platform and release applicability.; Limit CLI access to trusted administrators and required automation accounts..

Prepared

Jun 12, 2026, 22:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.