PT-2017-12407 · Cisco · Cisco Asr 5500

Publicado 2017-09-07 · Atualizado 2019-10-09 · CVE-2017-12217

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco ASR 5500 System Architecture Evolution (SAE) Gateways (affected versions not specified)

Description A vulnerability in the General Packet Radio Service (GPRS) Tunneling Protocol ingress packet handler could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition on an affected device. The issue is due to improper input validation of GPRS Tunneling Protocol packet headers. An attacker could exploit this by sending a malformed GPRS Tunneling Protocol packet, causing the GTPUMGR process to restart unexpectedly. This could result in a brief impact on traffic passing through the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-12217

Produtos afetados

Cisco Asr 5500

Referências · 4

• http://securityfocus.com/bid/100642 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-12217 · Nota de Segurança
• http://securitytracker.com/id/1039276 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-asr · Aviso do Fabricante