PT-2017-17227 · Cisco · Cisco Ios+1

CVE-2017-6665 · Publicado 2017-07-26 · Atualizado 2024-03-04

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software versions Denali-16.2.1 through Denali-16.3.1

Description A vulnerability in the Autonomic Networking feature could allow an unauthenticated, adjacent attacker to reset the Autonomic Control Plane (ACP) of an affected system and view ACP packets that are transferred in clear text within an affected system. The vulnerability is due to unknown reasons. An attacker could exploit this vulnerability by capturing and replaying ACP packets that are transferred within an affected system. A successful exploit could allow the attacker to reset the ACP of an affected system, resulting in a denial of service (DoS) condition. A successful exploit could also allow the attacker to capture and view ACP packets, which should have been encrypted over the ACP, in clear text.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2017-6665

Produtos afetados

Cisco Ios

Cisco Ios Xe

Referências · 5

• http://securityfocus.com/bid/99969 · Nota
• http://securitytracker.com/id/1038998 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-aniacp · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-6665 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6665 · Nota de Segurança