CVE-2017-6672
published 2017-07-25CVE-2017-6672: A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow…
PriorityP349high7.5CVSS 3.0
AVNACLPRNUINSUCNIHAN
EPSS
1.83%
76.4th percentile
A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870.
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | asr_5000_series_aggregation_services_routers | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
vendor_cisco5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco ASR 5000 Series Aggregation Services Routers Access Control List Security Bypass Vulnerability
vendor_cisco·2017-07-19·CVSS 5.3
CVE-2017-6672 [MEDIUM] CWE-264 Cisco ASR 5000 Series Aggregation Services Routers Access Control List Security Bypass Vulnerability
Cisco ASR 5000 Series Aggregation Services Routers Access Control List Security Bypass Vulnerability
A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device.
The vulnerability exists because the affected device fails to inspect and match certain traffic that meets the criteria defined in ACL rules configured for the device. An attacker could exploit this vulnerability by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to bypass certain sets of rules defined in ACLs for the affected device.
There are no workarounds that address this vulnerability.
Cisco
Cisco ASR 5000 Series Aggregation Services Routers Access Control List Security Bypass Vulnerability
vendor_cisco·CVSS 3.0
CVE-2017-6672 Cisco ASR 5000 Series Aggregation Services Routers Access Control List Security Bypass Vulnerability
CVE-2017-6672: Cisco ASR 5000 Series Aggregation Services Routers Access Control List Security Bypass Vulnerability
A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. The vulnerability exists because the affected device fails to inspect and match certain traffic that meets the criteria defined in ACL rules configured for the device. An attacker could exploit this vulnerability by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to bypass certain sets of rules defined in ACLs for the affected device. There are no
CVSS: 3.0
CWE: CWE-264, CWE-264
GHSA
GHSA-3xgv-53v3-rfw4: A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21
ghsa_unreviewed·2022-05-13
CVE-2017-6672 [HIGH] CWE-863 GHSA-3xgv-53v3-rfw4: A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21
A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/99921http://www.securitytracker.com/id/1038962https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr1http://www.securityfocus.com/bid/99921http://www.securitytracker.com/id/1038962https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr1
2017-07-25
Published