PT-2017-17233 · Cisco · Cisco Asr 5000 Series Aggregation Services Routers

Publicado 2017-07-25 · Atualizado 2019-10-03 · CVE-2017-6672

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Aggregation Services Routers versions prior to 22.x

Description A vulnerability in certain filtering mechanisms of access control lists (ACLs) could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device.

Recommendations For Cisco ASR 5000 Series Aggregation Services Routers versions prior to 22.x, update to version 22.x or later to resolve the issue.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2017-6672

Produtos afetados

Cisco Asr 5000 Series Aggregation Services Routers

Referências · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr1 · Aviso do Fabricante
• http://securitytracker.com/id/1038962 · Nota
• http://securityfocus.com/bid/99921 · Nota
• https://osv.dev/vulnerability/CVE-2017-6672 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6672 · Nota de Segurança