Authentication bypass in Cisco Catalyst 4000 Series Switches - CVE-2017-12213
Published: September 7, 2017
Vulnerability identifier: #VU8161
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2017-12213
CWE-ID: CWE-287
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vendor: Cisco Systems, Inc
Affected software:
Cisco Catalyst 4000 Series Switches
Cisco Catalyst 4000 Series Switches
Detailed vulnerability description
The vulnerability allows an physical adjacent attacker to bypass authentication on the target system.
The weakness exists in the dynamic access control list (ACL) feature due to an uncaught error condition that may occur during the reassignment of the auth-default-ACL dynamic ACL to a switch port. A remote attacker can bypass 802.1x authentication and cause dynamic ACL assignment to fail and the port to fail open.
The weakness exists in the dynamic access control list (ACL) feature due to an uncaught error condition that may occur during the reassignment of the auth-default-ACL dynamic ACL to a switch port. A remote attacker can bypass 802.1x authentication and cause dynamic ACL assignment to fail and the port to fail open.
How to mitigate CVE-2017-12213
The vulnerability is addressed in the following versions: 15.2(6.3.30i)E, 15.2(6.3.0i)E, 15.2(6.2.6i)E, 15.2(6)E, 15.2(5.5.36i)E2, 15.2(5)E2, 15.2(2)E7, 3.6(7)E.