CVE:CVE-2017-6672
CNNVD:CNNVD-201707-1177
Cisco ASR 5000 Series Aggregation Services Routers是美国思科（Cisco）公司的ASR 5000系列多功能路由器。access control lists(ACLs)是其中的一个访问控制列表组件。
Cisco ASR 5000 Series Aggregation Services路由器中的ACLs的过滤机制存在安全绕过漏洞，该漏洞源于程序没有检测和匹配特定的流量。远程攻击者可通过发送特制的HTTP数据包利用该漏洞绕过已配置的访问控制列表规则。
solution:Upgrade cisco asr_5000_series_software to a higher version than 19.3.5,19.3.11,19.3.12,19.6.0,19.6.3,19.6.6,20.1.v5,20.2.4,20.2.12,20.3.0,20.3.1,21.0.v1.66638,21.0.v2,21.1.0,21.1.2,21.1.m0.65710,21.1.m0.65921,21.1.m0.65931,21.1.m0.65986,21.1.v0,21.2.a0.65914,21.2.a0.65995,21.3.0,and avoid the version 19.3.5,19.3.11,19.3.12,19.6.0,19.6.3,19.6.6,20.1.v5,20.2.4,20.2.12,20.3.0,20.3.1,21.0.v1.66638,21.0.v2,21.1.0,21.1.2,21.1.m0.65710,21.1.m0.65921,21.1.m0.65931,21.1.m0.65986,21.1.v0,21.2.a0.65914,21.2.a0.65995,21.3.0