CVE-2017-6612

Severity: high (CVSS 8.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-07-25 · updated 2026-06-17
Weakness: CWE-119

Description

A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow an unauthenticated, remote attacker to redirect HTTP traffic sent to an affected device. More Information: CSCvc67927.

Affected products

Cisco ASR 5000 Series Aggregation Services Routers: 17.3.9.62033, 17.7.5, 19.6.3, 20.1.2, 20.2.12, 21.0.1 (+1)

References

http://www.securityfocus.com/bid/99920
http://www.securitytracker.com/id/1038961
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr
http://www.securityfocus.com/bid/99920
http://www.securitytracker.com/id/1038961
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-asr

Get alerted when CVE-2017-6612 or the next vulnerability affects your stack