cisco-sa-asr5k-ecs-bypass-2LqfPCL: Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability
First published: Wed Jun 17 2020(Updated: )
A vulnerability in the Enhanced Charging Service (ECS) functionality of Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass the traffic classification rules on an affected device. The vulnerability is due to insufficient input validation of user traffic going through an affected device. An attacker could exploit this vulnerability by sending a malformed HTTP request to an affected device. A successful exploit could allow the attacker to bypass the traffic classification rules and potentially avoid being charged for traffic consumption. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr5k-ecs-bypass-2LqfPCL
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco ASR 5000 Series Routers |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-asr5k-ecs-bypass-2LqfPCL?
The cisco-sa-asr5k-ecs-bypass-2LqfPCL vulnerability is rated as critical due to the potential for unauthorized traffic manipulation.
How do I fix cisco-sa-asr5k-ecs-bypass-2LqfPCL?
To remediate the cisco-sa-asr5k-ecs-bypass-2LqfPCL vulnerability, apply the latest firmware updates provided by Cisco.
What devices are affected by cisco-sa-asr5k-ecs-bypass-2LqfPCL?
The cisco-sa-asr5k-ecs-bypass-2LqfPCL vulnerability affects Cisco ASR 5000 Series Aggregation Services Routers.
Can cisco-sa-asr5k-ecs-bypass-2LqfPCL be exploited remotely?
Yes, the cisco-sa-asr5k-ecs-bypass-2LqfPCL vulnerability can be exploited by unauthenticated remote attackers.
What is the impact of cisco-sa-asr5k-ecs-bypass-2LqfPCL?
The impact of the cisco-sa-asr5k-ecs-bypass-2LqfPCL vulnerability allows attackers to bypass traffic classification rules, potentially impacting network security and performance.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/author
- agent/title
- agent/weakness
- agent/severity
- agent/references
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco asr 5000 series routers