5
CVSSv2

CVE-2017-6612

Published: 25/07/2017 Updated: 10/08/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 8.6 | Impact Score: 4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 up to and including 21.1.2 could allow an unauthenticated, remote malicious user to redirect HTTP traffic sent to an affected device. More Information: CSCvc67927.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco asr 5000 series software 17.3.9.62033

cisco asr 5000 series software 19.6.3

cisco asr 5000 series software 21.0.1

cisco asr 5000 series software 21.1.2

cisco asr 5000 series software 17.7.5

cisco asr 5000 series software 20.2.12

cisco asr 5000 series software 20.1.2

Vendor Advisories

A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to redirect HTTP traffic sent to an affected device The vulnerability exists because the affected device does not sufficiently validate HTTP traffic that contains one or more packets with ad ...