Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-3849


A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2 through 15.6) and Cisco IOS XE Software (possibly 3.7 through 3.18, and 16) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to incomplete input validation on certain crafted packets. An attacker could exploit this vulnerability by sending a crafted autonomic network channel discovery packet to a device that has all the following characteristics: (1) running a Cisco IOS Software or Cisco IOS XE Software release that supports the ANI feature; (2) configured as an autonomic registrar; (3) has a whitelist configured. An exploit could allow the attacker to cause the affected device to reload. Note: Autonomic networking should be configured with a whitelist. Do not remove the whitelist as a workaround. Cisco Bug IDs: CSCvc42717.


Published

2017-03-21T16:59:00.227

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.4 (HIGH)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

6.5

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-20

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios 15.2\(3\)e Yes
Operating System cisco ios 15.2\(3\)e1 Yes
Operating System cisco ios 15.2\(3\)e2 Yes
Operating System cisco ios 15.2\(3\)e3 Yes
Operating System cisco ios 15.2\(4\)e Yes
Operating System cisco ios 15.2\(4\)e1 Yes
Operating System cisco ios 15.2\(4\)e2 Yes
Operating System cisco ios 15.2\(4\)e3 Yes
Operating System cisco ios 15.2\(5\)e Yes
Operating System cisco ios 15.2\(5\)e1 Yes
Operating System cisco ios 15.2\(5a\)e Yes
Operating System cisco ios 15.2\(5b\)e Yes
Operating System cisco ios 15.3\(3\)s Yes
Operating System cisco ios 15.3\(3\)s1 Yes
Operating System cisco ios 15.3\(3\)s2 Yes
Operating System cisco ios 15.3\(3\)s3 Yes
Operating System cisco ios 15.3\(3\)s4 Yes
Operating System cisco ios 15.3\(3\)s5 Yes
Operating System cisco ios 15.3\(3\)s6 Yes
Operating System cisco ios 15.3\(3\)s8 Yes
Operating System cisco ios 15.3\(3\)s9 Yes
Operating System cisco ios 15.4\(1\)s Yes
Operating System cisco ios 15.4\(1\)s1 Yes
Operating System cisco ios 15.4\(1\)s2 Yes
Operating System cisco ios 15.4\(1\)s3 Yes
Operating System cisco ios 15.4\(1\)s4 Yes
Operating System cisco ios 15.4\(2\)s1 Yes
Operating System cisco ios 15.4\(2\)s2 Yes
Operating System cisco ios 15.4\(2\)s3 Yes
Operating System cisco ios 15.4\(2\)s4 Yes
Operating System cisco ios 15.4\(3\)s Yes
Operating System cisco ios 15.4\(3\)s1 Yes
Operating System cisco ios 15.4\(3\)s2 Yes
Operating System cisco ios 15.4\(3\)s3 Yes
Operating System cisco ios 15.4\(3\)s4 Yes
Operating System cisco ios 15.4\(3\)s5 Yes
Operating System cisco ios 15.4\(3\)s6 Yes
Operating System cisco ios 15.4\(3\)s6a Yes
Operating System cisco ios 15.5\(1\)s Yes
Operating System cisco ios 15.5\(1\)s1 Yes
Operating System cisco ios 15.5\(1\)s2 Yes
Operating System cisco ios 15.5\(1\)s3 Yes
Operating System cisco ios 15.5\(1\)s4 Yes
Operating System cisco ios 15.5\(2\)s Yes
Operating System cisco ios 15.5\(2\)s1 Yes
Operating System cisco ios 15.5\(2\)s2 Yes
Operating System cisco ios 15.5\(2\)s3 Yes
Operating System cisco ios 15.5\(2\)s4 Yes
Operating System cisco ios 15.5\(3\)s Yes
Operating System cisco ios 15.5\(3\)s0a Yes
Operating System cisco ios 15.5\(3\)s1 Yes
Operating System cisco ios 15.5\(3\)s1a Yes
Operating System cisco ios 15.5\(3\)s2 Yes
Operating System cisco ios 15.5\(3\)s3 Yes
Operating System cisco ios 15.5\(3\)s4 Yes
Operating System cisco ios 15.5\(3\)s5 Yes
Operating System cisco ios 15.5\(3\)sn Yes
Operating System cisco ios 15.6\(1\)s Yes
Operating System cisco ios 15.6\(1\)s1 Yes
Operating System cisco ios 15.6\(1\)s2 Yes
Operating System cisco ios 15.6\(1\)s3 Yes
Operating System cisco ios 15.6\(1\)t Yes
Operating System cisco ios 15.6\(1\)t0a Yes
Operating System cisco ios 15.6\(1\)t1 Yes
Operating System cisco ios 15.6\(1\)t2 Yes
Operating System cisco ios 15.6\(2\)s Yes
Operating System cisco ios 15.6\(2\)s1 Yes
Operating System cisco ios 15.6\(2\)s2 Yes
Operating System cisco ios 15.6\(2\)sn Yes
Operating System cisco ios 15.6\(2\)sp Yes
Operating System cisco ios 15.6\(2\)sp1 Yes
Operating System cisco ios 15.6\(2\)t Yes
Operating System cisco ios 15.6\(2\)t1 Yes
Operating System cisco ios 15.6\(2\)t2 Yes
Operating System cisco ios 15.6\(3\)m Yes
Operating System cisco ios 15.6\(3\)m0a Yes
Operating System cisco ios 15.6\(3\)m1 Yes
Operating System cisco ios_xe 3.7.0e Yes
Operating System cisco ios_xe 3.7.1e Yes
Operating System cisco ios_xe 3.7.2e Yes
Operating System cisco ios_xe 3.7.3e Yes
Operating System cisco ios_xe 3.7.4e Yes
Operating System cisco ios_xe 3.7.5e Yes
Operating System cisco ios_xe 3.8.0e Yes
Operating System cisco ios_xe 3.8.1e Yes
Operating System cisco ios_xe 3.8.2e Yes
Operating System cisco ios_xe 3.8.3e Yes
Operating System cisco ios_xe 3.9.0e Yes
Operating System cisco ios_xe 3.9.1e Yes
Operating System cisco ios_xe 3.10.0s Yes
Operating System cisco ios_xe 3.10.1s Yes
Operating System cisco ios_xe 3.10.1xbs Yes
Operating System cisco ios_xe 3.10.2s Yes
Operating System cisco ios_xe 3.10.2ts Yes
Operating System cisco ios_xe 3.10.3s Yes
Operating System cisco ios_xe 3.10.4s Yes
Operating System cisco ios_xe 3.10.5s Yes
Operating System cisco ios_xe 3.10.6s Yes
Operating System cisco ios_xe 3.10.7s Yes
Operating System cisco ios_xe 3.10.8as Yes
Operating System cisco ios_xe 3.10.8s Yes
Operating System cisco ios_xe 3.11.0s Yes
Operating System cisco ios_xe 3.11.1s Yes
Operating System cisco ios_xe 3.11.2s Yes
Operating System cisco ios_xe 3.11.3s Yes
Operating System cisco ios_xe 3.11.4s Yes
Operating System cisco ios_xe 3.12.0as Yes
Operating System cisco ios_xe 3.12.1s Yes
Operating System cisco ios_xe 3.12.2s Yes
Operating System cisco ios_xe 3.12.3s Yes
Operating System cisco ios_xe 3.12.4s Yes
Operating System cisco ios_xe 3.13.0as Yes
Operating System cisco ios_xe 3.13.0s Yes
Operating System cisco ios_xe 3.13.1s Yes
Operating System cisco ios_xe 3.13.2as Yes
Operating System cisco ios_xe 3.13.2s Yes
Operating System cisco ios_xe 3.13.3s Yes
Operating System cisco ios_xe 3.13.4s Yes
Operating System cisco ios_xe 3.13.5as Yes
Operating System cisco ios_xe 3.13.5s Yes
Operating System cisco ios_xe 3.13.6as Yes
Operating System cisco ios_xe 3.13.6s Yes
Operating System cisco ios_xe 3.14.0s Yes
Operating System cisco ios_xe 3.14.1s Yes
Operating System cisco ios_xe 3.14.2s Yes
Operating System cisco ios_xe 3.14.3s Yes
Operating System cisco ios_xe 3.14.4s Yes
Operating System cisco ios_xe 3.15.0s Yes
Operating System cisco ios_xe 3.15.1cs Yes
Operating System cisco ios_xe 3.15.1s Yes
Operating System cisco ios_xe 3.15.2s Yes
Operating System cisco ios_xe 3.15.3s Yes
Operating System cisco ios_xe 3.15.4s Yes
Operating System cisco ios_xe 3.16.0cs Yes
Operating System cisco ios_xe 3.16.0s Yes
Operating System cisco ios_xe 3.16.1as Yes
Operating System cisco ios_xe 3.16.1s Yes
Operating System cisco ios_xe 3.16.2bs Yes
Operating System cisco ios_xe 3.16.2s Yes
Operating System cisco ios_xe 3.16.3as Yes
Operating System cisco ios_xe 3.16.3s Yes
Operating System cisco ios_xe 3.16.4as Yes
Operating System cisco ios_xe 3.16.4bs Yes
Operating System cisco ios_xe 3.16.4ds Yes
Operating System cisco ios_xe 3.16.4s Yes
Operating System cisco ios_xe 3.16.5s Yes
Operating System cisco ios_xe 3.17.0s Yes
Operating System cisco ios_xe 3.17.1as Yes
Operating System cisco ios_xe 3.17.1s Yes
Operating System cisco ios_xe 3.17.2s Yes
Operating System cisco ios_xe 3.17.3s Yes
Operating System cisco ios_xe 3.18.0as Yes
Operating System cisco ios_xe 3.18.0s Yes
Operating System cisco ios_xe 3.18.0sp Yes
Operating System cisco ios_xe 3.18.1asp Yes
Operating System cisco ios_xe 3.18.1bsp Yes
Operating System cisco ios_xe 3.18.1csp Yes
Operating System cisco ios_xe 3.18.1s Yes
Operating System cisco ios_xe 3.18.1sp Yes
Operating System cisco ios_xe 3.18.2s Yes
Operating System cisco ios_xe 3.18.3vs Yes

References