VulnerabilityModified

CVE-2017-3875

MEDIUM 5.3EPSS 2.24%

Does this matter?

Lower severity and a low EPSS score (2.24%). Track it; it rarely justifies an emergency change on its own.

Description

An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexus 7000 Series Switches could allow an unauthenticated, remote attacker to bypass defined traffic configured within an access control list (ACL) on the affected system. More Information: CSCtz59354. Known Affected Releases: 5.2(4) 6.1(3)S5 6.1(3)S6 6.2(1.121)S0 7.2(1)D1(1) 7.3(0)ZN(0.161) 7.3(1)N1(0.1). Known Fixed Releases: 7.3(0)D1(1) 6.2(2) 6.1(5) 8.3(0)KMT(0.24) 8.3(0)CV(0.337) 7.3(1)N1(1) 7.3(0)ZN(0.210) 7.3(0)ZN(0.177) 7.3(0)ZD(0.194) 7.3(0)TSH(0.99) 7.3(0)SC(0.14) 7.3(0)RSP(0.7) 7.3(0)N1(1) 7.3(0)N1(0.193) 7.3(0)IZN(0.13) 7.3(0)IB(0.102) 7.3(0)GLF(0.44) 7.3(0)D1(0.178) 7.1(0)D1(0.14) 7.0(3)ITI2(1.6) 7.0(3)ISH1(2.13) 7.0(3)IFD6(0.78) 7.0(3)IFD6(0) 7.0(3)IDE6(0.12) 7.0(3)IDE6(0) 7.0(3)I2(1) 7.0(3)I2(0.315) 7.0(1)ZD(0.3) 7.0(0)ZD(0.84) 6.2(1.149)S0 6.2(0.285) 6.1(5.32)S0 6.1(4.97)S0 6.1(2.30)S0.

CVSS 3.0: 5.3 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS: 2.24% probability · 82th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: cisco/nx-os
Source: psirt@cisco.com

References

http://www.securityfocus.com/bid/96930Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038049
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cnsVendor Advisory
http://www.securityfocus.com/bid/96930Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038049
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cnsVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.