Vulnerabilities > Cisco > ASR 5000 Series Software > 21.1.2

DATE CVE VULNERABILITY TITLE RISK
2017-07-25 CVE-2017-6672 Incorrect Authorization vulnerability in Cisco ASR 5000 Series Software
A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Services Routers through 21.x could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device.
network
low complexity
cisco CWE-863
5.0
2017-07-25 CVE-2017-6612 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco ASR 5000 Series Software
A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow an unauthenticated, remote attacker to redirect HTTP traffic sent to an affected device.
network
low complexity
cisco CWE-119
5.0