CVE-2017-6672

A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. More Information: CSCvb99022 CSCvc16964 CSCvc37351 CSCvc54843 CSCvc63444 CSCvc77815 CSCvc88658 CSCve08955 CSCve14141 CSCve33870.

• CWE-863

• http://www.securityfocus.com/bid/99921Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038962Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr1Vendor Advisory
• http://www.securityfocus.com/bid/99921Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038962Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr1Vendor Advisory

Published

Jul 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6666A vulnerability in the forwarding component of Cisco IOS XR …
• CVE-2017-6667A vulnerability in the update process for the dynamic JAR fi…
• CVE-2017-6668Vulnerabilities in the web-based GUI of Cisco Unified Commun…
• CVE-2017-6669Multiple buffer overflow vulnerabilities exist in the Cisco …7.8
• CVE-2017-6670A vulnerability in the web-based GUI of Cisco Unified Commun…
• CVE-2017-6671A vulnerability in the email message scanning of Cisco Async…
• CVE-2017-6673A vulnerability in Cisco Firepower Management Center could a…
• CVE-2017-6674A vulnerability in the feature-license management functional…
• CVE-2017-6675A vulnerability in the web interface of Cisco Industrial Net…
• CVE-2017-6678A vulnerability in the ingress UDP packet processing functio…
• CVE-2017-6679The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior…6.4
• CVE-2017-6680A vulnerability in the AutoVNF logging function of Cisco Ult…