Lucene search

[email protected]NVD:CVE-2017-6672

HistoryJul 25, 2017 - 7:29 p.m.

CVE-2017-6672

2017-07-2519:29:00

CWE-863

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

52.7%

JSON

A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870.

Affected configurations

Nvd

Node

ciscoasr_5000_series_softwareMatch19.3.5

ciscoasr_5000_series_softwareMatch19.3.11

ciscoasr_5000_series_softwareMatch19.3.12

ciscoasr_5000_series_softwareMatch19.6.0

ciscoasr_5000_series_softwareMatch19.6.3

ciscoasr_5000_series_softwareMatch19.6.6

ciscoasr_5000_series_softwareMatch20.1.v5

ciscoasr_5000_series_softwareMatch20.2.4

ciscoasr_5000_series_softwareMatch20.2.12

ciscoasr_5000_series_softwareMatch20.3.0

ciscoasr_5000_series_softwareMatch20.3.1

ciscoasr_5000_series_softwareMatch21.0.v1.66638

ciscoasr_5000_series_softwareMatch21.0.v2

ciscoasr_5000_series_softwareMatch21.1.0

ciscoasr_5000_series_softwareMatch21.1.2

ciscoasr_5000_series_softwareMatch21.1.m0.65710

ciscoasr_5000_series_softwareMatch21.1.m0.65921

ciscoasr_5000_series_softwareMatch21.1.m0.65931

ciscoasr_5000_series_softwareMatch21.1.m0.65986

ciscoasr_5000_series_softwareMatch21.1.v0

ciscoasr_5000_series_softwareMatch21.2.a0.65914

ciscoasr_5000_series_softwareMatch21.2.a0.65995

ciscoasr_5000_series_softwareMatch21.3.0

VendorProductVersionCPE
ciscoasr_5000_series_software19.3.5cpe:2.3:a:cisco:asr_5000_series_software:19.3.5:*:*:*:*:*:*:*
ciscoasr_5000_series_software19.3.11cpe:2.3:a:cisco:asr_5000_series_software:19.3.11:*:*:*:*:*:*:*
ciscoasr_5000_series_software19.3.12cpe:2.3:a:cisco:asr_5000_series_software:19.3.12:*:*:*:*:*:*:*
ciscoasr_5000_series_software19.6.0cpe:2.3:a:cisco:asr_5000_series_software:19.6.0:*:*:*:*:*:*:*
ciscoasr_5000_series_software19.6.3cpe:2.3:a:cisco:asr_5000_series_software:19.6.3:*:*:*:*:*:*:*
ciscoasr_5000_series_software19.6.6cpe:2.3:a:cisco:asr_5000_series_software:19.6.6:*:*:*:*:*:*:*
ciscoasr_5000_series_software20.1.v5cpe:2.3:a:cisco:asr_5000_series_software:20.1.v5:*:*:*:*:*:*:*
ciscoasr_5000_series_software20.2.4cpe:2.3:a:cisco:asr_5000_series_software:20.2.4:*:*:*:*:*:*:*
ciscoasr_5000_series_software20.2.12cpe:2.3:a:cisco:asr_5000_series_software:20.2.12:*:*:*:*:*:*:*
ciscoasr_5000_series_software20.3.0cpe:2.3:a:cisco:asr_5000_series_software:20.3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	asr_5000_series_software	19.3.5	cpe:2.3:a:cisco:asr_5000_series_software:19.3.5:::::::*
cisco	asr_5000_series_software	19.3.11	cpe:2.3:a:cisco:asr_5000_series_software:19.3.11:::::::*
cisco	asr_5000_series_software	19.3.12	cpe:2.3:a:cisco:asr_5000_series_software:19.3.12:::::::*
cisco	asr_5000_series_software	19.6.0	cpe:2.3:a:cisco:asr_5000_series_software:19.6.0:::::::*
cisco	asr_5000_series_software	19.6.3	cpe:2.3:a:cisco:asr_5000_series_software:19.6.3:::::::*
cisco	asr_5000_series_software	19.6.6	cpe:2.3:a:cisco:asr_5000_series_software:19.6.6:::::::*
cisco	asr_5000_series_software	20.1.v5	cpe:2.3:a:cisco:asr_5000_series_software:20.1.v5:::::::*
cisco	asr_5000_series_software	20.2.4	cpe:2.3:a:cisco:asr_5000_series_software:20.2.4:::::::*
cisco	asr_5000_series_software	20.2.12	cpe:2.3:a:cisco:asr_5000_series_software:20.2.12:::::::*
cisco	asr_5000_series_software	20.3.0	cpe:2.3:a:cisco:asr_5000_series_software:20.3.0:::::::*

Rows per page:

1-10 of 231

References

www.securityfocus.com/bid/99921

www.securitytracker.com/id/1038962

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr1

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

52.7%

JSON

Related for NVD:CVE-2017-6672

cisco1 prion1 cve1 cvelist1