cbcvebase.
CVE-2017-3867
published 2017-03-17

CVE-2017-3867: A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco Adaptive Security Appliance (ASA)…

PriorityP434medium5.3CVSS 3.0
AVNACLPRNUINSUCNILAN
EPSS
2.10%
81.6th percentile
A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to bypass the access control list (ACL) for specific TCP and UDP traffic. More Information: CSCvc68229. Known Affected Releases: 9.6(2). Known Fixed Releases: 99.1(20.1) 99.1(10.2) 98.1(12.7) 98.1(1.49) 97.1(6.58) 97.1(0.134) 96.2(0.109) 9.7(1.1) 9.6(2.99) 9.6(2.8).

Affected

10 ranges
VendorProductVersion rangeFixed in
ciscoadaptive_security_appliance_bgp_bidirectional_forwarding_detection_acl——
ciscoadaptive_security_appliance_software——
ciscoadaptive_security_appliance_software——
ciscoadaptive_security_appliance_software——
ciscoadaptive_security_appliance_software——
ciscoadaptive_security_appliance_software——
ciscoadaptive_security_appliance_software——
ciscoadaptive_security_appliance_software——
ciscoadaptive_security_appliance_software——
ciscoadaptive_security_appliance_software——

CVSS provenance

nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
vendor_cisco5.8MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.