CVE-2017-1773

CWE-3453 documents3 sources
Severity
4.0MEDIUM
EPSS
0.1%
top 71.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Datapower GatewayIBM Datapower Gateways
Timeline
PublishedJan 31
Latest updateMay 14

Description

IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform DNS cache poisoning and redirect Internet traffic. IBM X-Force ID: 136817.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/datapower_gateways6 versions+5
▶NVDibm/datapower_gateway7.1.0.0 — 7.1.0.20+5

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rrxx-cc32-qfvp: IBM DataPower Gateways 7↗2022-05-14
▶
CVEList
CVE-2017-1773: IBM DataPower Gateways 7↗2018-01-31
▶
CVE-2017-1773 (MEDIUM CVSS 4) | IBM DataPower Gateways 7.1 | cvebase.io