CVE-2017-6731: A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR So...

Security readout for executives and security teams

This issue can briefly disrupt multicast routing sessions on affected Cisco IOS XR systems. An unauthenticated remote attacker could cause an MSDP session reset, creating a short denial-of-service condition that recovers within seconds. The business concern is service instability, not data theft or device takeover based on the supplied sources. Exposure is most likely where Cisco IOS XR runs MSDP and accepts relevant ingress traffic. The supplied data only names Cisco IOS XR and the affected releases 4.3.2.MCAST and 6.0.2.BASE, so broader product or version impact should not be assumed without Cisco guidance. Treat this as a targeted availability risk for multicast-dependent environments. Prioritize internet- or partner-reachable MSDP deployments and high-value routing infrastructure. Urgency is lower than code execution issues, but outages may still affect business services that depend on multicast routing stability. Mitigation focus: Upgrade affected Cisco IOS XR systems to a listed fixed release where applicable.; Review Cisco advisory guidance before choosing a target fixed release.; Restrict MSDP exposure to trusted network paths where operationally feasible..

Prepared

Jun 12, 2026, 22:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.