CVE-2017-3870 : A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allo

A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass a configured URL filter rule. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA), both virtual and hardware appliances, that are configured with URL filters for email scanning. More Information: CSCvc69700. Known Affected Releases: 8.5.3-069 9.1.1-074 9.1.2-010.

Published 2017-03-17 22:59:00

Updated 2017-07-12 01:29:17

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Overflow

Exploit prediction scoring system (EPSS) score for CVE-2017-3870

Probability of exploitation activity in the next 30 days: 0.15%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 50 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2017-3870

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
5.8	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: Low Availability: None

CWE ids for CVE-2017-3870

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-3870

http://www.securityfocus.com/bid/96907

Cisco AsyncOS CVE-2017-3870 Remote Security Bypass Vulnerability
Third Party Advisory;VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wsa

Cisco Web Security Appliance URL Filtering Bypass Vulnerability
Vendor Advisory
http://www.securitytracker.com/id/1038043

Cisco Web Security Appliance Input Validation Flaw Lets Remote Users Bypass URL Filters - SecurityTracker

Products affected by CVE-2017-3870

Cisco » Web Security Appliance » Version: 9.1.1-074
cpe:2.3:a:cisco:web_security_appliance:9.1.1-074:*:*:*:*:*:*:*
Matching versions
Cisco » Web Security Appliance » Version: 8.5.3-069
cpe:2.3:a:cisco:web_security_appliance:8.5.3-069:*:*:*:*:*:*:*
Matching versions
Cisco » Web Security Appliance » Version: 9.1.2-010
cpe:2.3:a:cisco:web_security_appliance:9.1.2-010:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2017-3870

Exploit prediction scoring system (EPSS) score for CVE-2017-3870

CVSS scores for CVE-2017-3870

CWE ids for CVE-2017-3870

References for CVE-2017-3870

Products affected by CVE-2017-3870