Skip to content
CVE Tracker
Back

CVE-2017-6620

A vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W Wireless-N VPN Router could allow an…

Medium5.8EPSS 1.6%
Published
Updated
Reserved
Assigned by
cisco

Description

A vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass the remote management ACL. The vulnerability is due to incorrect implementation of the ACL decision made during the ingress connection request to the remote management interface. An attacker could exploit this vulnerability by sending a connection to the management IP address or domain name of the targeted device. A successful exploit could allow the attacker to bypass the configured remote management ACL. This can occur when the Remote Management configuration parameter is set to Disabled. This vulnerability affects Cisco CVR100W Wireless-N VPN Routers running a firmware image prior to 1.0.1.24. Cisco Bug IDs: CSCvc14457.

Scores

CVSS scores of CVE-2017-6620, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0Medium5.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
EPSS (exploitation in 30 days)
1.6% · top 24% of all CVEs (3 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.8.

Weakness

Affected products

  • Cisco CVR100W Wireless-N VPN Router

    • affected Cisco CVR100W Wireless-N VPN Router

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2017-6620 badge
[![CVE-2017-6620](https://trackcve.app/badge/CVE-2017-6620.svg)](https://trackcve.app/cve/CVE-2017-6620)

Record last updated .