CVE-2017-6612

Опубликовано: 25 июл. 2017

Источник: nvd

CVSS3: 8.6

CVSS2: 5

EPSS Низкий

Описание

A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow an unauthenticated, remote attacker to redirect HTTP traffic sent to an affected device. More Information: CSCvc67927.

Ссылки

http://www.securityfocus.com/bid/99920
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038961
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr
Vendor Advisory
http://www.securityfocus.com/bid/99920
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038961
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:asr_5000_series_software:17.3.9.62033:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asr_5000_series_software:17.7.5:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asr_5000_series_software:19.6.3:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asr_5000_series_software:20.1.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asr_5000_series_software:20.2.12:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asr_5000_series_software:21.0.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:asr_5000_series_software:21.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00749

Низкий

8.6 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-8559-f4g5-6pjj