CVE-2017-6612

EUVD-2017-15666
A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow an unauthenticated, remote attacker to redirect HTTP traffic sent to an affected device. More Information: CSCvc67927.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.6 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
Affected Products (NVD)
VendorProductVersion
ciscoasr_5000_series_software
17.3.9.62033
ciscoasr_5000_series_software
17.7.5
ciscoasr_5000_series_software
19.6.3
ciscoasr_5000_series_software
20.1.2
ciscoasr_5000_series_software
20.2.12
ciscoasr_5000_series_software
21.0.1
ciscoasr_5000_series_software
21.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/99920
http://www.securitytracker.com/id/1038961
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr
http://www.securityfocus.com/bid/99920
http://www.securitytracker.com/id/1038961
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr