CVE-2017-6612: Cisco Asr 5000 Series Software

High severity, CVSS 8.6. EPSS: 1.9% chance of exploitation in the next 30 days.

A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.62033 through 21.1.2 could allow an unauthenticated, remote attacker to redirect HTTP traffic sent to an affected device. More Information: CSCvc67927.

Affected products

• Cisco Asr 5000 Series Software: version 17.3.9.62033 only; version 17.7.5 only; version 19.6.3 only; version 20.1.2 only; version 20.2.12 only; version 21.0.1 only; …

Published 2017-07-25. Last modified 2026-06-17.