CVE-2017-6603

Опубликовано: 07 апр. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 6.1

EPSS Низкий

Описание

A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on a targeted system because of incorrect IPv6 Packet Processing. More Information: CSCuy94366. Known Affected Releases: 15.4(3)S3.15. Known Fixed Releases: 15.6(2)SP 15.6(1.31)SP.

Ссылки

http://www.securityfocus.com/bid/97450
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038185
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-asr
Vendor Advisory
http://www.securityfocus.com/bid/97450
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038185
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-asr
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:cisco:asr_900_series_firmware:15.4\(3\)s3.15:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:cisco:asr-920-12cz-a:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr-920-12cz-d:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr-920-12sz-im:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr-920-24sz-im:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr-920-24sz-m:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr-920-24tz-m:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr-920-4sz-a:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr-920-4sz-d:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_903:-:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00342

Низкий

6.5 Medium

CVSS3

6.1 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-h4x6-qj3h-xgg8