PT-2017-12453 · Cisco · Cisco Ios

Publicado 2017-11-02 · Atualizado 2019-10-09 · CVE-2017-12279

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco Aironet Access Points (affected versions not specified)

Description A vulnerability in the packet processing code could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected device, leading to the disclosure of confidential information. This issue is due to insufficient condition checks when adding padding to egress packets. An attacker could exploit this by sending a crafted IP packet to an affected device, potentially allowing them to retrieve content from memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-12279

Produtos afetados

Cisco Ios

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-12279 · Nota de Segurança
• http://securityfocus.com/bid/101643 · Nota
• http://securitytracker.com/id/1039720 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-iosap · Aviso do Fabricante