Lucene search

K
cve[email protected]CVE-2017-6603
HistoryApr 07, 2017 - 5:59 p.m.

CVE-2017-6603

2017-04-0717:59:00
web.nvd.nist.gov
22
4
cisco
asr 903
asr 920
rsp2 card
vulnerability
denial of service
dos
ipv6
cscuy94366
nvd

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

39.6%

A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on a targeted system because of incorrect IPv6 Packet Processing. More Information: CSCuy94366. Known Affected Releases: 15.4(3)S3.15. Known Fixed Releases: 15.6(2)SP 15.6(1.31)SP.

Affected configurations

NVD
Node
ciscoasr_900_series_firmwareMatch15.4\(3\)s3.15
AND
ciscoasr-920-12cz-aMatch-
OR
ciscoasr-920-12cz-dMatch-
OR
ciscoasr-920-12sz-imMatch-
OR
ciscoasr-920-24sz-imMatch-
OR
ciscoasr-920-24sz-mMatch-
OR
ciscoasr-920-24tz-mMatch-
OR
ciscoasr-920-4sz-aMatch-
OR
ciscoasr-920-4sz-dMatch-
OR
ciscoasr_903Match-

CNA Affected

[
  {
    "product": "Cisco ASR 903 and ASR 920 Series Devices",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco ASR 903 and ASR 920 Series Devices"
      }
    ]
  }
]

Social References

More

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

39.6%

Related for CVE-2017-6603