Cisco IOS XE Line Card Console Access Vulnerability (cisco-sa-20170927-cc)
High Nessus Plugin ID 103702
SynopsisThe remote device is missing a vendor-supplied security patch.
DescriptionAccording to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by a local privilege escalation vulnerability. An unauthenticated attacker, with physical access, can exploit this vulnerability to gain access to an affected devices' operating system.
SolutionUpgrade to the relevant fixed version referenced in Cisco bug ID's CSCvc65866 and CSCve77132.