CVE-2017-1773

MediumCVSS 4.0/10Last modified Jun 17, 2026

Description

IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform DNS cache poisoning and redirect Internet traffic. IBM X-Force ID: 136817.

Metrics

CVSS 3.0 4.0/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Weakness enumeration

CWE-345

Affected software

Vendor	Product	Versions
IBM	DataPower Gateways	7.1; 7.2; 7.5; 7.5.1; 7.5.2; 7.6

References

http://www.ibm.com/support/docview.wss?uid=swg22012758Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/136817VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22012758Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/136817VDB Entry, Vendor Advisory

Timeline

Published: Jan 31, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-177309.8DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php.CVE-2017-177319.8DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.CVE-2017-177339.8Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request.CVE-2017-177349.8CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions.CVE-2017-177359.8CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies.CVE-2017-177369.8Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global Administrator access by visiting CMSInstall/insta CVE-2017-177376.1The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /sto CVE-2017-177387.5The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html.CVE-2017-177399.8The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowi CVE-2017-17745.3IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users. The information can be used CVE-2017-177407.5contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to fr CVE-2017-177416.5The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information from kernel memory, a