Test ID:	1.3.6.1.4.1.25623.1.0.106654
Category:	CISCO
Title:	Cisco Adaptive Security Appliance BGP Bidirectional Forwarding Detection ACL Bypass Vulnerability (cisco-sa-20170315-asa)
Summary:	A vulnerability in the Border Gateway Protocol (BGP); Bidirectional Forwarding Detection (BFD) implementation of Cisco Adaptive Security Appliance; (ASA) Software could allow an unauthenticated, remote attacker to bypass the access control list; (ACL) for specific TCP and UDP traffic.
Description:	Summary: A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to bypass the access control list (ACL) for specific TCP and UDP traffic. Vulnerability Insight: The vulnerability occurs because the BFD implementation incorrectly allows traffic with destination ports 3784 and 3785 through the interface ACLs. Vulnerability Impact: An attacker could exploit this vulnerability by sending TCP or UDP packets with a destination port of 3784 or 3785 through the ASA. Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-3867 BugTraq ID: 96926 http://www.securityfocus.com/bid/96926 http://www.securitytracker.com/id/1038051
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.