CVEvulnerability

CVE-2017-6672

7.5 HIGH Published 2017-07-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-07-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-863

Description

A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870.

Affected configurations

• cisco asr 5000 series software 19.3.5 • cisco asr 5000 series software 19.3.11 • cisco asr 5000 series software 19.3.12 • cisco asr 5000 series software 19.6.0 • cisco asr 5000 series software 19.6.3 • cisco asr 5000 series software 19.6.6 • cisco asr 5000 series software 20.1.v5 • cisco asr 5000 series software 20.2.4 • cisco asr 5000 series software 20.2.12 • cisco asr 5000 series software 20.3.0 • cisco asr 5000 series software 20.3.1 • cisco asr 5000 series software 21.0.v1.66638 • cisco asr 5000 series software 21.0.v2 • cisco asr 5000 series software 21.1.0 • cisco asr 5000 series software 21.1.2 • cisco asr 5000 series software 21.1.m0.65710 • cisco asr 5000 series software 21.1.m0.65921 • cisco asr 5000 series software 21.1.m0.65931 • cisco asr 5000 series software 21.1.m0.65986 • cisco asr 5000 series software 21.1.v0 • cisco asr 5000 series software 21.2.a0.65914 • cisco asr 5000 series software 21.2.a0.65995 • cisco asr 5000 series software 21.3.0

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References