CVE-2017-3875

Published Mar 17, 2017

Last updated 3 months ago

CVSS medium 5.3

Overview

Description: An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexus 7000 Series Switches could allow an unauthenticated, remote attacker to bypass defined traffic configured within an access control list (ACL) on the affected system. More Information: CSCtz59354. Known Affected Releases: 5.2(4) 6.1(3)S5 6.1(3)S6 6.2(1.121)S0 7.2(1)D1(1) 7.3(0)ZN(0.161) 7.3(1)N1(0.1). Known Fixed Releases: 7.3(0)D1(1) 6.2(2) 6.1(5) 8.3(0)KMT(0.24) 8.3(0)CV(0.337) 7.3(1)N1(1) 7.3(0)ZN(0.210) 7.3(0)ZN(0.177) 7.3(0)ZD(0.194) 7.3(0)TSH(0.99) 7.3(0)SC(0.14) 7.3(0)RSP(0.7) 7.3(0)N1(1) 7.3(0)N1(0.193) 7.3(0)IZN(0.13) 7.3(0)IB(0.102) 7.3(0)GLF(0.44) 7.3(0)D1(0.178) 7.1(0)D1(0.14) 7.0(3)ITI2(1.6) 7.0(3)ISH1(2.13) 7.0(3)IFD6(0.78) 7.0(3)IFD6(0) 7.0(3)IDE6(0.12) 7.0(3)IDE6(0) 7.0(3)I2(1) 7.0(3)I2(0.315) 7.0(1)ZD(0.3) 7.0(0)ZD(0.84) 6.2(1.149)S0 6.2(0.285) 6.1(5.32)S0 6.1(4.97)S0 6.1(2.30)S0.
Source: ykramarz@cisco.com
NVD status: Modified

Risk scores

CVSS 3.0

Type: Primary
Base score: 5.3
Impact score: 1.4
Exploitability score: 3.9
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Severity: MEDIUM

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-20

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:nx-os:5.2\\(4\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "356B4143-5184-491B-9D10-19D6536366CD"
          },
          {
            "criteria": "cpe:2.3:o:cisco:nx-os:6.1\\(3\\)s5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C3D98CD1-AE44-4863-9B9B-8B16746E122C"
          },
          {
            "criteria": "cpe:2.3:o:cisco:nx-os:6.1\\(3\\)s6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F3357A3F-C304-4D73-8E0A-74DC3B54913D"
          },
          {
            "criteria": "cpe:2.3:o:cisco:nx-os:6.2\\(1.121\\)s0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "710C34E7-0FCF-4182-9514-8E05C7273EFE"
          },
          {
            "criteria": "cpe:2.3:o:cisco:nx-os:7.2\\(1\\)d1\\(1\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C18A0045-87F3-4782-81C5-0BF615EA9346"
          },
          {
            "criteria": "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)zn\\(0.161\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9D32F3A3-C0C6-44FE-8047-C2751BC0124B"
          },
          {
            "criteria": "cpe:2.3:o:cisco:nx-os:7.3\\(1\\)n1\\(0.1\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DD92EECB-28FD-436C-98E6-488554EDFB18"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "B22B3865-30E9-4B5A-A37D-DC33F1150FFE"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "459A7F11-52BF-4AD6-B495-4C4D6C050493"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_7000_4-slot:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "FEACA55F-4335-4478-B608-EB92EE1D6C6D"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "DB73543E-9B5B-4BA9-8FB4-666AF5AC8B6B"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_7700_10-slot:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "E5ABB175-81BE-4C46-BD2D-70016508BE22"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_7700_18-slot:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "71F93299-A715-4E97-87FE-B1E248EA98BD"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_7700_2-slot:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "3D71B228-FFE5-45F7-ADCF-6D359ADA6D31"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_7700_6-slot:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9F3AD807-5A0F-4DF5-9A7A-748205F409E7"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Social media

Configurations

References