CVE-2017-12299 — Improper Input Validation in Cisco

Vendor	Product	Version range	Fixed in
cisco	firepower_4100_and_9300_security_appliance_local_management_filtering	—	—
cisco	firepower_extensible_operating_system	—	—

GHSA

GHSA-mm54-9jw6-25g6: A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that

ghsa_unreviewed·2022-05-13

CVE-2017-12299 [MEDIUM] CWE-20 GHSA-mm54-9jw6-25g6: A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that could allow an unauthenticated, remote attacker to send traffic to the local IP address of the device, bypassing any filters that are configured to deny local IP management traffic. The vulnerability is due to an implementation error that exists in the process of creating default IP blocks when the device is initialized, and the way in which those IP blocks interact with user-configured filters for local IP management traffic (for example, SSH to the device). An attacker could exploit this vulnerability by sending traffic to the local IP address of the targeted device. A successful exploit could allow the attacker to connect to the local IP a

Cisco

Cisco Firepower 4100 and 9300 Security Appliance Local Management Filtering Bypass Vulnerability

vendor_cisco·2017-11-15·CVSS 5.3

CVE-2017-12299 [MEDIUM] CWE-20 Cisco Firepower 4100 and 9300 Security Appliance Local Management Filtering Bypass Vulnerability Cisco Firepower 4100 and 9300 Security Appliance Local Management Filtering Bypass Vulnerability A vulnerability in the process for creating default IP blocks during device initialization for Cisco Firepower 4100 Series and Firepower 9300 Security Appliances running Cisco FXOS Software could allow an unauthenticated, remote attacker to send traffic to the local IP address of the device, bypassing any filters that are configured to deny local IP management traffic. The vulnerability is due to an implementation error that exists in the process for creating default IP blocks when the device is initialized, and the way in which those IP blocks interact with user-configured filters for local IP management traffic (for example, SSH to the device). An attacker could exploit this vulnerability b

Cisco

Cisco Firepower 4100 and 9300 Security Appliance Local Management Filtering Bypass Vulnerability

vendor_cisco·CVSS 3.0

CVE-2017-12299 Cisco Firepower 4100 and 9300 Security Appliance Local Management Filtering Bypass Vulnerability CVE-2017-12299: Cisco Firepower 4100 and 9300 Security Appliance Local Management Filtering Bypass Vulnerability A vulnerability in the process for creating default IP blocks during device initialization for Cisco Firepower 4100 Series and Firepower 9300 Security Appliances running Cisco FXOS Software could allow an unauthenticated, remote attacker to send traffic to the local IP address of the device, bypassing any filters that are configured to deny local IP management traffic. The vulnerability is due to an implementation error that exists in the process for creating default IP blocks when the device is initialized, and the way in which those IP blocks interact with user-configured filters for local IP management traffic (for example, SSH to the device). An attacker could exploit this v

CVE-2017-12299: A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that could…

Affected

CVSS provenance