Vulnerability Details : CVE-2017-12229
A vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1 through 16.5 could allow an unauthenticated, remote attacker to bypass authentication to the REST API of the web UI of the affected software. The vulnerability is due to insufficient input validation for the REST API of the affected software. An attacker could exploit this vulnerability by sending a malicious API request to an affected device. A successful exploit could allow the attacker to bypass authentication and gain access to the web UI of the affected software. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software, if the HTTP Server feature is enabled for the device. The newly redesigned, web-based administration UI was introduced in the Denali 16.2 Release of Cisco IOS XE Software. This vulnerability does not affect the web-based administration UI in earlier releases of Cisco IOS XE Software. Cisco Bug IDs: CSCuz46036.
Vulnerability category: BypassGain privilege
Products affected by CVE-2017-12229
- cpe:2.3:o:cisco:ios_xe:16.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:3.8.0ex:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:3.2.0ja:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:3.2.1xo:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:3.1.3as:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:16.1.3:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:16.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:16.1.4:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:16.1.3a:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:16.2.2a:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:16.5.1c:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:3.6.5be:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:3.18.3vs:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:3.4.7asg:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-12229
19.46%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 95 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-12229
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST | |
|
9.8
|
CRITICAL | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
CWE ids for CVE-2017-12229
-
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.Assigned by:
- nvd@nist.gov (Primary)
- ykramarz@cisco.com (Secondary)
References for CVE-2017-12229
-
http://www.securityfocus.com/bid/101032
Cisco IOS XE Software CVE-2017-12229 Authentication Bypass VulnerabilityThird Party Advisory;VDB Entry
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-restapi
Cisco IOS XE Software Web UI REST API Authentication Bypass VulnerabilityVendor Advisory
-
http://www.securitytracker.com/id/1039447
Cisco IOS XE Web User Interface REST API Bug Lets Remote Users Bypass Authentication on the Target System - SecurityTrackerThird Party Advisory;VDB Entry
Jump to