Vulnerability identifier: #VU8161

Vulnerability risk: Low

CVSSv3.1: 4.1 [CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2017-12213

CWE-ID: CWE-287

Exploitation vector: Local network

Exploit availability: No

Vulnerable software:
Cisco Catalyst 4000 Series Switches
Hardware solutions / Routers & switches, VoIP, GSM, etc

Vendor: Cisco Systems, Inc

Description
The vulnerability allows an physical adjacent attacker to bypass authentication on the target system.

The weakness exists in the dynamic access control list (ACL) feature due to an uncaught error condition that may occur during the reassignment of the auth-default-ACL dynamic ACL to a switch port. A remote attacker can bypass 802.1x authentication and cause dynamic ACL assignment to fail and the port to fail open.

Mitigation
The vulnerability is addressed in the following versions: 15.2(6.3.30i)E, 15.2(6.3.0i)E, 15.2(6.2.6i)E, 15.2(6)E, 15.2(5.5.36i)E2, 15.2(5)E2, 15.2(2)E7, 3.6(7)E.

Vulnerable software versions

Cisco Catalyst 4000 Series Switches: 3.6.5

---

External links
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-cat

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.