CVE-2017-6672

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-863

Affected software

VendorProductVersions
n/aCisco ASR 5000 Series Aggregation Services RoutersCisco ASR 5000 Series Aggregation Services Routers

References

Timeline

Published
Jul 25, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-66736.5A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information. An attacker cCVE-2017-66747.5A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote atCVE-2017-66756.1A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a refleCVE-2017-66787.5A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software 1CVE-2017-66796.4The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initCVE-2017-66807.5A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create CVE-2017-66817.5A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to exeCVE-2017-66828.8A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to run arbitrary commanCVE-2017-66838.8A vulnerability in the esc_listener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to executeCVE-2017-66848.8A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the LCVE-2017-66858.8A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the managementCVE-2017-66868.8A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the managemen
CVE-2017-6672: High severity, CVSS 7.5 | Vulnix