CVE-2017-6672

Published: Jul 25, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870.

Affected (23)

Products: Cisco: Asr 5000 Series Software

Cisco

1 product

Asr 5000 Series Software

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Cisco Asr 5000 Series Software	Version 19.3.11
Cisco Asr 5000 Series Software	Version 19.3.12
Cisco Asr 5000 Series Software	Version 19.3.5
Cisco Asr 5000 Series Software	Version 19.6.0
Cisco Asr 5000 Series Software	Version 19.6.3
Cisco Asr 5000 Series Software	Version 19.6.6
Cisco Asr 5000 Series Software	Version 20.1.v5
Cisco Asr 5000 Series Software	Version 20.2.12
Cisco Asr 5000 Series Software	Version 20.2.4
Cisco Asr 5000 Series Software	Version 20.3.0
Cisco Asr 5000 Series Software	Version 20.3.1
Cisco Asr 5000 Series Software	Version 21.0.v1.66638
Cisco Asr 5000 Series Software	Version 21.0.v2
Cisco Asr 5000 Series Software	Version 21.1.0
Cisco Asr 5000 Series Software	Version 21.1.2
Cisco Asr 5000 Series Software	Version 21.1.m0.65710
Cisco Asr 5000 Series Software	Version 21.1.m0.65921
Cisco Asr 5000 Series Software	Version 21.1.m0.65931
Cisco Asr 5000 Series Software	Version 21.1.m0.65986
Cisco Asr 5000 Series Software	Version 21.1.v0
Cisco Asr 5000 Series Software	Version 21.2.a0.65914
Cisco Asr 5000 Series Software	Version 21.2.a0.65995
Cisco Asr 5000 Series Software	Version 21.3.0