Read the docs
TI-2017-04430 Aliases CVE-2017-6672GHSA-3xgv-53v3-rfw4

Incorrect authorization in Cisco ASR 5000 Series Aggregation Services Routers

Priority LOW 36CWE-863Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · High · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-863.

Summary

A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870.

Why it matters now

EPSS 0.01833 79th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco ASR 5000 Series Aggregation Services RoutersCisco ASR 5000 Series Aggregation Services Routers—No fix listedCNA
  • Cisco ASR 5000 Series Aggregation Services Routers Vendor— Affected Cisco ASR 5000 Series Aggregation Services Routers Fixed in — No fix listed CNA

CPE configurations NVD · 23

CPEVersionsRoleVendor
cpe:2.3:a:cisco:asr_5000_series_software:19.3.5:*:*:*:*:*:*:*19.3.5VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:19.3.11:*:*:*:*:*:*:*19.3.11VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:19.3.12:*:*:*:*:*:*:*19.3.12VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:19.6.0:*:*:*:*:*:*:*19.6.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:19.6.3:*:*:*:*:*:*:*19.6.3VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:19.6.6:*:*:*:*:*:*:*19.6.6VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:20.1.v5:*:*:*:*:*:*:*20.1.v5VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:20.2.4:*:*:*:*:*:*:*20.2.4VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:20.2.12:*:*:*:*:*:*:*20.2.12VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:20.3.0:*:*:*:*:*:*:*20.3.0VulnerableCisco
  • cpe:2.3:a:cisco:asr_5000_series_software:19.3.5:*:*:*:*:*:*:* Versions 19.3.5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:19.3.11:*:*:*:*:*:*:* Versions 19.3.11 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:19.3.12:*:*:*:*:*:*:* Versions 19.3.12 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:19.6.0:*:*:*:*:*:*:* Versions 19.6.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:19.6.3:*:*:*:*:*:*:* Versions 19.6.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:19.6.6:*:*:*:*:*:*:* Versions 19.6.6 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:20.1.v5:*:*:*:*:*:*:* Versions 20.1.v5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:20.2.4:*:*:*:*:*:*:* Versions 20.2.4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:20.2.12:*:*:*:*:*:*:* Versions 20.2.12 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:20.3.0:*:*:*:*:*:*:* Versions 20.3.0 Vulnerable ·Cisco
Show 13 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:asr_5000_series_software:20.3.1:*:*:*:*:*:*:*20.3.1VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:21.0.v1.66638:*:*:*:*:*:*:*21.0.v1.66638VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:21.0.v2:*:*:*:*:*:*:*21.0.v2VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:21.1.0:*:*:*:*:*:*:*21.1.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:21.1.2:*:*:*:*:*:*:*21.1.2VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65710:*:*:*:*:*:*:*21.1.m0.65710VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65921:*:*:*:*:*:*:*21.1.m0.65921VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65931:*:*:*:*:*:*:*21.1.m0.65931VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65986:*:*:*:*:*:*:*21.1.m0.65986VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:21.1.v0:*:*:*:*:*:*:*21.1.v0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:21.2.a0.65914:*:*:*:*:*:*:*21.2.a0.65914VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:21.2.a0.65995:*:*:*:*:*:*:*21.2.a0.65995VulnerableCisco
cpe:2.3:a:cisco:asr_5000_series_software:21.3.0:*:*:*:*:*:*:*21.3.0VulnerableCisco
  • cpe:2.3:a:cisco:asr_5000_series_software:20.3.1:*:*:*:*:*:*:* Versions 20.3.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:21.0.v1.66638:*:*:*:*:*:*:* Versions 21.0.v1.66638 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:21.0.v2:*:*:*:*:*:*:* Versions 21.0.v2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:21.1.0:*:*:*:*:*:*:* Versions 21.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:21.1.2:*:*:*:*:*:*:* Versions 21.1.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65710:*:*:*:*:*:*:* Versions 21.1.m0.65710 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65921:*:*:*:*:*:*:* Versions 21.1.m0.65921 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65931:*:*:*:*:*:*:* Versions 21.1.m0.65931 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:21.1.m0.65986:*:*:*:*:*:*:* Versions 21.1.m0.65986 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:21.1.v0:*:*:*:*:*:*:* Versions 21.1.v0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:21.2.a0.65914:*:*:*:*:*:*:* Versions 21.2.a0.65914 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:21.2.a0.65995:*:*:*:*:*:*:* Versions 21.2.a0.65995 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_series_software:21.3.0:*:*:*:*:*:*:* Versions 21.3.0 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-6672
  2. 2026-10-03 Alias added: GHSA-3xgv-53v3-rfw4

References

Advisory 1

  • TI-2017-02916 Access control flaw in Cisco StarOS CVSS 3.0HIGH 8.8
  • TI-2017-04371 Memory corruption in Cisco ASR 5000 Series Aggregation Services Routers CVSS 3.0HIGH 8.6
  • TI-2016-07532 Memory corruption in Cisco ASR 5000 CVSS 3.0HIGH 7.5
  • TI-2016-05548 Resource management flaw in Cisco Aggregation Services Router 5000 Series Switch CVSS 3.0HIGH 7.5
  • TI-2016-01226 The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768… CVSS 3.0HIGH 7.5
  • TI-2016-05547 Resource management flaw in Cisco StarOS 20.0.0 through 21.0.M0.64246 CVSS 3.0HIGH 7.5
See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences