6.5

CVE-2017-6665

A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic Control Plane (ACP) of an affected system and view ACP packets that are transferred in clear text within an affected system, an Information Disclosure Vulnerability. More Information: CSCvd51214. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Version 3.7.0e
Cisco ≫ Ios Xe Version 3.7.1e
Cisco ≫ Ios Xe Version 3.7.3e
Cisco ≫ Ios Xe Version 3.8.0e
Cisco ≫ Ios Xe Version 3.8.0ex
Cisco ≫ Ios Xe Version 3.8.1e
Cisco ≫ Ios Xe Version 3.8.2e
Cisco ≫ Ios Xe Version 3.8.3e
Cisco ≫ Ios Xe Version 3.9.0e
Cisco ≫ Ios Xe Version 3.9.1e
Cisco ≫ Ios Xe Version 3.10.4s
Cisco ≫ Ios Xe Version 3.10.8as
Cisco ≫ Ios Xe Version 3.10.8s
Cisco ≫ Ios Xe Version 3.11.3s
Cisco ≫ Ios Xe Version 3.11.4s
Cisco ≫ Ios Xe Version 3.12.0as
Cisco ≫ Ios Xe Version 3.12.0s
Cisco ≫ Ios Xe Version 3.12.1s
Cisco ≫ Ios Xe Version 3.12.2s
Cisco ≫ Ios Xe Version 3.12.3s
Cisco ≫ Ios Xe Version 3.12.4s
Cisco ≫ Ios Xe Version 3.13.0s
Cisco ≫ Ios Xe Version 3.13.1s
Cisco ≫ Ios Xe Version 3.13.2as
Cisco ≫ Ios Xe Version 3.13.2s
Cisco ≫ Ios Xe Version 3.13.4s
Cisco ≫ Ios Xe Version 3.13.5as
Cisco ≫ Ios Xe Version 3.13.5s
Cisco ≫ Ios Xe Version 3.13.6as
Cisco ≫ Ios Xe Version 3.13.6s
Cisco ≫ Ios Xe Version 3.13.7as
Cisco ≫ Ios Xe Version 3.13.8s
Cisco ≫ Ios Xe Version 3.14.0s
Cisco ≫ Ios Xe Version 3.14.1s
Cisco ≫ Ios Xe Version 3.14.2s
Cisco ≫ Ios Xe Version 3.14.3s
Cisco ≫ Ios Xe Version 3.14.4s
Cisco ≫ Ios Xe Version 3.15.0s
Cisco ≫ Ios Xe Version 3.15.1s
Cisco ≫ Ios Xe Version 3.15.2s
Cisco ≫ Ios Xe Version 3.15.3s
Cisco ≫ Ios Xe Version 3.15.4s
Cisco ≫ Ios Xe Version 3.16.0s
Cisco ≫ Ios Xe Version 3.16.1as
Cisco ≫ Ios Xe Version 3.16.2as
Cisco ≫ Ios Xe Version 3.16.2s
Cisco ≫ Ios Xe Version 3.16.3as
Cisco ≫ Ios Xe Version 3.16.3s
Cisco ≫ Ios Xe Version 3.16.4as
Cisco ≫ Ios Xe Version 3.16.4ds
Cisco ≫ Ios Xe Version 3.16.4s
Cisco ≫ Ios Xe Version 3.16.6s
Cisco ≫ Ios Xe Version 3.17.0s
Cisco ≫ Ios Xe Version 3.17.1as
Cisco ≫ Ios Xe Version 3.17.1s
Cisco ≫ Ios Xe Version 3.17.3s
Cisco ≫ Ios Xe Version 3.17.4s
Cisco ≫ Ios Xe Version 3.18.0as
Cisco ≫ Ios Xe Version 3.18.0s
Cisco ≫ Ios Xe Version 3.18.0sp
Cisco ≫ Ios Xe Version 3.18.1bsp
Cisco ≫ Ios Xe Version 3.18.1s
Cisco ≫ Ios Xe Version 3.18.1sp
Cisco ≫ Ios Xe Version 3.18.2asp
Cisco ≫ Ios Xe Version 3.18.2s
Cisco ≫ Ios Xe Version 3.18.2sp
Cisco ≫ Ios Xe Version 3.18.3s
Cisco ≫ Ios Xe Version 3.18.3sp
Cisco ≫ Ios Xe Version 16.5.1c
Cisco ≫ Ios Xe Version 16.6.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.342
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:P/I:N/A:N
CWE-319 Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

http://www.securityfocus.com/bid/99969
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038998
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-aniacp
Vendor Advisory