PT-2017-2989 · Cisco · Cisco Ios Xe

Published 2017-09-27 · Updated 2019-10-09 · CVE-2017-12236

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.2 through 16.5

Description A logic error in the implementation of the Locator/ID Separation Protocol (LISP) could allow an unauthenticated, remote attacker to bypass authentication checks when registering an Endpoint Identifier (EID) to a Routing Locator (RLOC) in the map server/map resolver (MS/MR). The vulnerability can be exploited by sending specific valid map-registration requests, which will be accepted by the MS/MR even if the authentication keys do not match. A successful exploit could allow the attacker to inject invalid mappings of EIDs to RLOCs in the MS/MR.

Recommendations For Cisco IOS XE versions 3.2 through 16.5, update to a fixed software release, as Cisco has released software updates that address this vulnerability. At the moment, there is no information about other workarounds that address this vulnerability.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2017-02334

CVE-2017-12236

Affected Products

Cisco Ios Xe

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-12236 · Security Note
• https://bdu.fstec.ru/vul/2017-02334 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-lisp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-12236 · Vendor Advisory
• http://securityfocus.com/bid/101033 · Note
• http://securitytracker.com/id/1039448 · Note