CVE-2017-3870: Buffer Overflow
A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass a configured URL filter rule. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA), both virtual and hardware appliances, that are configured with URL filters for email scanning. More Information: CSCvc69700. Known Affected Releases: 8.5.3-069 9.1.1-074 9.1.2-010.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cisco AsyncOS Software for Cisco Web Security Appliance (WSA)to a version that resolves this vulnerability.Patch CSCvc69700
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3870?
CVE-2017-3870 is classified as a high-severity vulnerability due to its potential to allow unauthorized access to URL filtering features.
How do I fix CVE-2017-3870?
To fix CVE-2017-3870, upgrade your Cisco Web Security Appliance to a release that includes the first fixed release from Cisco.
Who is affected by CVE-2017-3870?
CVE-2017-3870 affects all Cisco Web Security Appliance versions prior to the first fixed release, specifically those under versions 8.5.3-069, 9.1.1-074, and 9.1.2-010.
What impact does CVE-2017-3870 have?
The impact of CVE-2017-3870 is that it allows unauthenticated remote attackers to bypass configured URL filter rules, potentially exposing sensitive web content.
When was CVE-2017-3870 disclosed?
CVE-2017-3870 was publicly disclosed on March 15, 2017, when Cisco released an advisory regarding the vulnerability.