Lucene search

PRIOn knowledge basePRION:CVE-2017-6672

HistoryJul 25, 2017 - 7:29 p.m.

Design/Logic Flaw

2017-07-2519:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

51.6%

JSON

A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870.

CPENameOperatorVersion
asr_5000_series_softwareeq20.1.0-v5
asr_5000_series_softwareeq19.6.3
asr_5000_series_softwareeq21.1.0-m0.65710
asr_5000_series_softwareeq19.6.0
asr_5000_series_softwareeq21.2.0-a0.65995
asr_5000_series_softwareeq21.2.0-a0.65914
asr_5000_series_softwareeq21.1.0-m0.65921
asr_5000_series_softwareeq19.6.6
asr_5000_series_softwareeq21.1.0-m0.65986
asr_5000_series_softwareeq19.3.11

Name	Operator	Version
asr_5000_series_software	eq	20.1.0-v5
asr_5000_series_software	eq	19.6.3
asr_5000_series_software	eq	21.1.0-m0.65710
asr_5000_series_software	eq	19.6.0
asr_5000_series_software	eq	21.2.0-a0.65995
asr_5000_series_software	eq	21.2.0-a0.65914
asr_5000_series_software	eq	21.1.0-m0.65921
asr_5000_series_software	eq	19.6.6
asr_5000_series_software	eq	21.1.0-m0.65986
asr_5000_series_software	eq	19.3.11

Rows per page:

1-10 of 231

References

www.securityfocus.com/bid/99921

www.securitytracker.com/id/1038962

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr1

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

51.6%

JSON

Related for PRION:CVE-2017-6672