CVE-2017-3875 Security feature bypass in Cisco Nexus 7000 Series Switches

Medium 5.3 Published 17 Mar 2017 Updated 5 Aug 2024

Remote attackers can bypass Access Control Lists on Cisco Nexus 7000 switches, allowing unauthorized traffic to pass through the network device.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2017-3875?

CVE-2017-3875 is a medium-severity vulnerability in Cisco Nx-Os, published on 17 Mar 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexus 7000 Series Switches could allow an unauthenticated, remote attacker to bypass defined traffic configured within an access control list (ACL) on the affected system. More Information: CSCtz59354. Known Affected Releases: 5.2(4) 6.1(3)S5 6.1(3)S6 6.2(1.121)S0 7.2(1)D1(1) 7.3(0)ZN(0.161) 7.3(1)N1(0.1). Known Fixed Releases: 7.3(0)D1(1) 6.2(2) 6.1(5) 8.3(0)KMT(0.24) 8.3(0)CV(0.337) 7.3(1)N1(1) 7.3(0)ZN(0.210) 7.3(0)ZN(0.177) 7.3(0)ZD(0.194) 7.3(0)TSH(0.99) 7.3(0)SC(0.14) 7.3(0)RSP(0.7) 7.3(0)N1(1) 7.3(0)N1(0.193) 7.3(0)IZN(0.13) 7.3(0)IB(0.102) 7.3(0)GLF(0.44) 7.3(0)D1(0.178) 7.1(0)D1(0.14) 7.0(3)ITI2(1.6) 7.0(3)ISH1(2.13) 7.0(3)IFD6(0.78) 7.0(3)IFD6(0) 7.0(3)IDE6(0.12) 7.0(3)IDE6(0) 7.0(3)I2(1) 7.0(3)I2(0.315) 7.0(1)ZD(0.3) 7.0(0)ZD(0.84) 6.2(1.149)S0 6.2(0.285) 6.1(5.32)S0 6.1(4.97)S0 6.1(2.30)S0.

Weakness: CWE-20

Which versions are affected by CVE-2017-3875?

It affects 1 product.

Products include Cisco Nx-Os.

How do I fix CVE-2017-3875?

No fix has been published for CVE-2017-3875 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-3875 being exploited?

There is no known exploitation of CVE-2017-3875 in the wild and no public exploit code.

All Cisco Nx-Os vulnerabilities

Sources

Also known as GHSA-w838-4jcq-qc2c.