Lucene search

[email protected]NVD:CVE-2017-1773

HistoryJan 31, 2018 - 3:29 p.m.

CVE-2017-1773

2018-01-3115:29:00

CWE-345

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.7%

JSON

IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform DNS cache poisoning and redirect Internet traffic. IBM X-Force ID: 136817.

Affected configurations

NVD

Node

ibmdatapower_gatewayRange7.1.0.0–7.1.0.20

ibmdatapower_gatewayRange7.2.0.0–7.2.0.17

ibmdatapower_gatewayRange7.5.0.0–7.5.0.11

ibmdatapower_gatewayRange7.5.1.0–7.5.1.10

ibmdatapower_gatewayRange7.5.2.0–7.5.2.10

ibmdatapower_gatewayRange7.6.0.0–7.6.0.3

References

www.ibm.com/support/docview.wss?uid=swg22012758

exchange.xforce.ibmcloud.com/vulnerabilities/136817

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.7%

JSON

Related for NVD:CVE-2017-1773

cve1 prion1 cvelist1 ibm1