Lucene search

CiscoCVE-2017-12299

HistoryNov 16, 2017 - 7:29 a.m.

CVE-2017-12299

2017-11-1607:29:00

CWE-20

cisco

web.nvd.nist.gov

cisco asa

next-generation firewall

vulnerability

remote attacker

bypass

ip management traffic

cisco bug

cscvd97962

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

40.1%

JSON

A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that could allow an unauthenticated, remote attacker to send traffic to the local IP address of the device, bypassing any filters that are configured to deny local IP management traffic. The vulnerability is due to an implementation error that exists in the process of creating default IP blocks when the device is initialized, and the way in which those IP blocks interact with user-configured filters for local IP management traffic (for example, SSH to the device). An attacker could exploit this vulnerability by sending traffic to the local IP address of the targeted device. A successful exploit could allow the attacker to connect to the local IP address of the device even when there are filters configured to deny the traffic. Cisco Bug IDs: CSCvd97962.

Affected configurations

Nvd

Node

ciscofirepower_extensible_operating_systemMatch2.2\(1.58\)

VendorProductVersionCPE
ciscofirepower_extensible_operating_system2.2(1.58)cpe:2.3:o:cisco:firepower_extensible_operating_system:2.2\(1.58\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	firepower_extensible_operating_system	2.2(1.58)	cpe:2.3:o:cisco:firepower_extensible_operating_system:2.2\(1.58\):::::::*

CNA Affected

[
  {
    "product": "Cisco ASA Next-Generation Firewall Services",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco ASA Next-Generation Firewall Services"
      }
    ]
  }
]

References

www.securityfocus.com/bid/101915

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-firepower1

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

40.1%

JSON

Related for CVE-2017-12299