CVE-2017-6672

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-6672
A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://www.securityfocus.com/bid/99921 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038962 Third Party Advisory VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr1 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:asr_5000_series_software:19.3.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:19.3.11:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:19.3.12:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:19.6.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:19.6.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:19.6.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:20.1.v5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:20.2.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:20.2.12:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:20.3.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:20.3.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:21.0.v1.66638:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:21.0.v2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:21.1.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:21.1.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65710:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65921:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65931:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65986:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:21.1.v0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:21.2.a0.65914:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:21.2.a0.65995:*:*:*:*:*:*:*
cpe:2.3:a:cisco:asr_5000_series_software:21.3.0:*:*:*:*:*:*:*
History

No history.

Information

Published : 2017-07-25 19:29

Updated : 2024-02-04 19:29

NVD link : CVE-2017-6672

Mitre link : CVE-2017-6672

CVE.ORG link : CVE-2017-6672

JSON object : View

Products Affected

cisco

  • asr_5000_series_software
CWE
CWE-863

Incorrect Authorization