PT-2017-1539 · Cisco · Cisco Nexus 7000 Series Switches+1

Published 2017-03-15 · Updated 2017-07-12 · CVE-2017-3875

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Nexus 7000 Series Switches versions 5.2(4) through 7.3(0)ZN(0.161) Cisco Nexus 7000 Series Switches versions 6.1(3)S5 through 6.1(3)S6 Cisco Nexus 7000 Series Switches versions 6.2(1.121)S0 through 7.2(1)D1(1) Cisco Nexus 7000 Series Switches version 7.3(1)N1(0.1)

Description The issue is due to insufficient input validation in access-control filtering mechanisms, allowing an unauthenticated, remote attacker to bypass defined traffic configured within an access control list (ACL) on the affected system. This can be exploited by issuing crafted commands for which a particular ACL would not match defined traffic, potentially allowing the attacker to bypass certain rulesets defined on a Network Time Protocol (NTP) ACL.

Recommendations For versions 5.2(4) through 7.3(0)ZN(0.161), update to version 7.3(0)D1(1) or later. For versions 6.1(3)S5 through 6.1(3)S6, update to version 6.1(5) or later. For versions 6.2(1.121)S0 through 7.2(1)D1(1), update to version 6.2(2) or later. For version 7.3(1)N1(0.1), update to version 7.3(1)N1(1) or later. As a temporary workaround, consider restricting access to the vulnerable ACL mechanisms until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2017-00684

CVE-2017-3875

Affected Products

Cisco Nexus

Cisco Nexus 7000 Series Switches

References · 6

• https://osv.dev/vulnerability/CVE-2017-3875 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3875 · Security Note
• https://bdu.fstec.ru/vul/2017-00684 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cns · Vendor Advisory
• http://securitytracker.com/id/1038049 · Note
• http://securityfocus.com/bid/96930 · Note