CVE-2017-3867

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-03-17 · updated 2026-06-17
Weakness: CWE-287

Description

A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to bypass the access control list (ACL) for specific TCP and UDP traffic. More Information: CSCvc68229. Known Affected Releases: 9.6(2). Known Fixed Releases: 99.1(20.1) 99.1(10.2) 98.1(12.7) 98.1(1.49) 97.1(6.58) 97.1(0.134) 96.2(0.109) 9.7(1.1) 9.6(2.99) 9.6(2.8).

Affected products

Cisco ASA Software: 6.3.1, 9.6.2, 9.6.2.1, 9.6.2.2, 9.6.2.3, 9.6.2.7 (+3)

References

http://www.securityfocus.com/bid/96926
http://www.securitytracker.com/id/1038051
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-asa
http://www.securityfocus.com/bid/96926
http://www.securitytracker.com/id/1038051
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-asa

Get alerted when CVE-2017-3867 or the next vulnerability affects your stack