CVE-2017-6664

Опубликовано: 07 авг. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to access the Autonomic Networking infrastructure of an affected system, after the certificate for the autonomic node has been revoked. This vulnerability affected devices that are running Release 16.x of Cisco IOS XE Software and are configured to use Autonomic Networking. This vulnerability does not affect devices that are running an earlier release of Cisco IOS XE Software or devices that are not configured to use Autonomic Networking. More Information: CSCvd22328. Known Affected Releases: 15.5(1)S3.1 Denali-16.2.1.

Ссылки

http://www.securityfocus.com/bid/99986
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038997
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anicrl
Vendor Advisory
http://www.securityfocus.com/bid/99986
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038997
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anicrl
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:cisco:ios_xe:3.10.8as:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.12.0s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:16.5.1c:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00337

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-295

Связанные уязвимости

GHSA-7v4f-rwhc-7rw2

CVSS3: 7.5

github

больше 3 лет назад

BDU:2017-01848

fstec

больше 8 лет назад

Уязвимость компонента Autonomic Networking операционной системы Cisco IOS XE, позволяющая нарушителю получить доступ к инфраструктуре Autonomic Networking