CVE-2017-6770Medium· 4.2▾ SunlitMultiple Cisco products are affected by a vulnerability involving the Open Shortest Path First (OSPF) Routing Protocol Link State Advertisement (LSA) database. This vulnerability could allow an unauthenticated, remote attacker to take full…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.1 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 18.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
Last analysed / modified upstream
1.7%
Multiple Cisco products are affected by a vulnerability involving the Open Shortest Path First (OSPF) Routing Protocol Link State Advertisement (LSA) database. This vulnerability could allow an unauthenticated, remote attacker to take full control of the OSPF Autonomous System (AS) domain routing table, allowing the attacker to intercept or black-hole traffic.
The attacker could exploit this vulnerability by injecting crafted OSPF packets. Successful exploitation could cause the targeted router to flush its routing table and propagate the crafted OSPF LSA type 1 update throughout the OSPF AS domain.
To exploit this vulnerability, an attacker must accurately determine certain parameters within the LSA database on the target router. This vulnerability can only be triggered by sending crafted unicast or multicast OSPF LSA type 1 packets. No other LSA type packets can trigger this vulnerability.
The Fabric Shortest Path First (FSPF) protocol is not affected by this vulnerability.
Workarounds that address this vulnerability are available.
Multiple Cisco Products OSPF LSA Manipulation Vulnerability. Released 2017-07-27, updated 2017-08-03.
Affected:
Cisco has released software updates that address this vulnerability. https://software.cisco.com
Connected by shared product, vendor, weakness, or advisory.
CVE-2019-1748High· 7.4Cisco IOS and IOS XE Software Network Plug-and-Play Agent Certificate Validation Vulnerability (CVE-2019-1748)
CVE-2025-20169High· 7.7Cisco IOS, IOS XE, and IOS XR SNMP Denial of Service Vulnerabilities
CVE-2025-20175High· 7.7Cisco IOS and IOS XE SNMP Denial of Service Vulnerabilities
CVE-2025-20170High· 7.7Cisco IOS and IOS XE SNMP Denial of Service Vulnerabilities
CVE-2025-20171High· 7.7Cisco IOS and IOS XE SNMP Denial of Service Vulnerabilities
CVE-2025-20174High· 7.7Cisco IOS and IOS XE SNMP Denial of Service Vulnerabilities