CVE-2017-6612

8.6HIGH

Key Information:

Vendor
Cisco
Status
Cisco Asr 5000 Series Aggregation Services Routers
Vendor
CVE Published:
25 July 2017

Summary

A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow an unauthenticated, remote attacker to redirect HTTP traffic sent to an affected device. More Information: CSCvc67927.

Affected Version(s)

Cisco ASR 5000 Series Aggregation Services Routers Cisco ASR 5000 Series Aggregation Services Routers

References

http://www.securitytracker.com/id/1038961
vdb-entryx_refsource_SECTRACK
https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/99920
vdb-entryx_refsource_BID

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.