Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-3856


A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient resource handling by the affected software when the web user interface is under a high load. An attacker could exploit this vulnerability by sending a high number of requests to the web user interface of the affected software. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. To exploit this vulnerability, the attacker must have access to the management interface of the affected software, which is typically connected to a restricted management network. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software, if the web user interface of the software is enabled. By default, the web user interface is not enabled. Cisco Bug IDs: CSCup70353.


Published

2017-03-22T19:59:00.277

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-399
  • Type: Primary
    CWE-400

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios_xe 3.1.0s Yes
Operating System cisco ios_xe 3.1.0sg Yes
Operating System cisco ios_xe 3.1.1s Yes
Operating System cisco ios_xe 3.1.1sg Yes
Operating System cisco ios_xe 3.1.2s Yes
Operating System cisco ios_xe 3.1.3as Yes
Operating System cisco ios_xe 3.1.3s Yes
Operating System cisco ios_xe 3.1.4as Yes
Operating System cisco ios_xe 3.1.4s Yes
Operating System cisco ios_xe 3.1s Yes
Operating System cisco ios_xe 3.1sg Yes
Operating System cisco ios_xe 3.2.0ja Yes
Operating System cisco ios_xe 3.2.0se Yes
Operating System cisco ios_xe 3.2.0sg Yes
Operating System cisco ios_xe 3.2.0xo Yes
Operating System cisco ios_xe 3.2.1s Yes
Operating System cisco ios_xe 3.2.1se Yes
Operating System cisco ios_xe 3.2.1sg Yes
Operating System cisco ios_xe 3.2.1xo Yes
Operating System cisco ios_xe 3.2.2s Yes
Operating System cisco ios_xe 3.2.2se Yes
Operating System cisco ios_xe 3.2.2sg Yes
Operating System cisco ios_xe 3.2.3se Yes
Operating System cisco ios_xe 3.2.3sg Yes
Operating System cisco ios_xe 3.2.4sg Yes
Operating System cisco ios_xe 3.2.5sg Yes
Operating System cisco ios_xe 3.2.6sg Yes
Operating System cisco ios_xe 3.2.7sg Yes
Operating System cisco ios_xe 3.2.8sg Yes
Operating System cisco ios_xe 3.2.9sg Yes
Operating System cisco ios_xe 3.2.11sg Yes
Operating System cisco ios_xe 3.2ja Yes
Operating System cisco ios_xe 3.2s Yes
Operating System cisco ios_xe 3.2se Yes
Operating System cisco ios_xe 3.2sg Yes
Operating System cisco ios_xe 3.2xo Yes
Operating System cisco ios_xe 3.3.0s Yes
Operating System cisco ios_xe 3.3.0se Yes
Operating System cisco ios_xe 3.3.0sg Yes
Operating System cisco ios_xe 3.3.0sq Yes
Operating System cisco ios_xe 3.3.0xo Yes
Operating System cisco ios_xe 3.3.1s Yes
Operating System cisco ios_xe 3.3.1se Yes
Operating System cisco ios_xe 3.3.1sg Yes
Operating System cisco ios_xe 3.3.1sq Yes
Operating System cisco ios_xe 3.3.1xo Yes
Operating System cisco ios_xe 3.3.2s Yes
Operating System cisco ios_xe 3.3.2se Yes
Operating System cisco ios_xe 3.3.2sg Yes
Operating System cisco ios_xe 3.3.2xo Yes
Operating System cisco ios_xe 3.3.3se Yes
Operating System cisco ios_xe 3.3.4se Yes
Operating System cisco ios_xe 3.3.5se Yes
Operating System cisco ios_xe 3.3s Yes
Operating System cisco ios_xe 3.3se Yes
Operating System cisco ios_xe 3.3sg Yes
Operating System cisco ios_xe 3.3sq Yes
Operating System cisco ios_xe 3.3xo Yes
Operating System cisco ios_xe 3.4.0as Yes
Operating System cisco ios_xe 3.4.0s Yes
Operating System cisco ios_xe 3.4.0sg Yes
Operating System cisco ios_xe 3.4.0sq Yes
Operating System cisco ios_xe 3.4.1s Yes
Operating System cisco ios_xe 3.4.1sg Yes
Operating System cisco ios_xe 3.4.1sq Yes
Operating System cisco ios_xe 3.4.2s Yes
Operating System cisco ios_xe 3.4.2sg Yes
Operating System cisco ios_xe 3.4.3s Yes
Operating System cisco ios_xe 3.4.3sg Yes
Operating System cisco ios_xe 3.4.4s Yes
Operating System cisco ios_xe 3.4.4sg Yes
Operating System cisco ios_xe 3.4.5s Yes
Operating System cisco ios_xe 3.4.5sg Yes
Operating System cisco ios_xe 3.4.6s Yes
Operating System cisco ios_xe 3.4.6sg Yes
Operating System cisco ios_xe 3.4.7sg Yes
Operating System cisco ios_xe 3.4.8sg Yes
Operating System cisco ios_xe 3.4s Yes
Operating System cisco ios_xe 3.4sg Yes
Operating System cisco ios_xe 3.4sq Yes
Operating System cisco ios_xe 3.5.0e Yes
Operating System cisco ios_xe 3.5.0s Yes
Operating System cisco ios_xe 3.5.0sq Yes
Operating System cisco ios_xe 3.5.1e Yes
Operating System cisco ios_xe 3.5.1s Yes
Operating System cisco ios_xe 3.5.1sq Yes
Operating System cisco ios_xe 3.5.2e Yes
Operating System cisco ios_xe 3.5.2s Yes
Operating System cisco ios_xe 3.5.2sq Yes
Operating System cisco ios_xe 3.5.3e Yes
Operating System cisco ios_xe 3.5.3sq Yes
Operating System cisco ios_xe 3.5.4sq Yes
Operating System cisco ios_xe 3.5.5sq Yes
Operating System cisco ios_xe 3.5e Yes
Operating System cisco ios_xe 3.5s Yes
Operating System cisco ios_xe 3.5sq Yes
Operating System cisco ios_xe 3.6.0e Yes
Operating System cisco ios_xe 3.6.0s Yes
Operating System cisco ios_xe 3.6.1e Yes
Operating System cisco ios_xe 3.6.1s Yes
Operating System cisco ios_xe 3.6.2ae Yes
Operating System cisco ios_xe 3.6.2s Yes
Operating System cisco ios_xe 3.6.3e Yes
Operating System cisco ios_xe 3.6.4e Yes
Operating System cisco ios_xe 3.6.5ae Yes
Operating System cisco ios_xe 3.6.5be Yes
Operating System cisco ios_xe 3.6.5e Yes
Operating System cisco ios_xe 3.6e Yes
Operating System cisco ios_xe 3.6s Yes
Operating System cisco ios_xe 3.7.0bs Yes
Operating System cisco ios_xe 3.7.0e Yes
Operating System cisco ios_xe 3.7.0s Yes
Operating System cisco ios_xe 3.7.1e Yes
Operating System cisco ios_xe 3.7.1s Yes
Operating System cisco ios_xe 3.7.2e Yes
Operating System cisco ios_xe 3.7.2s Yes
Operating System cisco ios_xe 3.7.2ts Yes
Operating System cisco ios_xe 3.7.3e Yes
Operating System cisco ios_xe 3.7.3s Yes
Operating System cisco ios_xe 3.7.4e Yes
Operating System cisco ios_xe 3.7.4s Yes
Operating System cisco ios_xe 3.7.5s Yes
Operating System cisco ios_xe 3.7.6s Yes
Operating System cisco ios_xe 3.7.7s Yes
Operating System cisco ios_xe 3.7e Yes
Operating System cisco ios_xe 3.7s Yes
Operating System cisco ios_xe 3.8.0e Yes
Operating System cisco ios_xe 3.8.0ex Yes
Operating System cisco ios_xe 3.8.0s Yes
Operating System cisco ios_xe 3.8.1e Yes
Operating System cisco ios_xe 3.8.1s Yes
Operating System cisco ios_xe 3.8.2e Yes
Operating System cisco ios_xe 3.8.2s Yes
Operating System cisco ios_xe 3.8e Yes
Operating System cisco ios_xe 3.8ex Yes
Operating System cisco ios_xe 3.8s Yes
Operating System cisco ios_xe 3.9.0e Yes
Operating System cisco ios_xe 3.9.0s Yes
Operating System cisco ios_xe 3.9.1s Yes
Operating System cisco ios_xe 3.9.2s Yes
Operating System cisco ios_xe 3.9e Yes
Operating System cisco ios_xe 3.9s Yes
Operating System cisco ios_xe 3.10.0s Yes
Operating System cisco ios_xe 3.10.1s Yes
Operating System cisco ios_xe 3.10.1xbs Yes
Operating System cisco ios_xe 3.10.2s Yes
Operating System cisco ios_xe 3.10.2ts Yes
Operating System cisco ios_xe 3.10.3s Yes
Operating System cisco ios_xe 3.10.4s Yes
Operating System cisco ios_xe 3.10.5s Yes
Operating System cisco ios_xe 3.10.6s Yes
Operating System cisco ios_xe 3.10.7s Yes
Operating System cisco ios_xe 3.10.8s Yes
Operating System cisco ios_xe 3.10s Yes
Operating System cisco ios_xe 3.11.0s Yes
Operating System cisco ios_xe 3.11.1s Yes
Operating System cisco ios_xe 3.11.2s Yes
Operating System cisco ios_xe 3.11.3s Yes
Operating System cisco ios_xe 3.11.4s Yes
Operating System cisco ios_xe 3.11s Yes
Operating System cisco ios_xe 3.12.0as Yes
Operating System cisco ios_xe 3.12.0s Yes
Operating System cisco ios_xe 3.12.1s Yes
Operating System cisco ios_xe 3.12.2s Yes
Operating System cisco ios_xe 3.12.3s Yes
Operating System cisco ios_xe 3.12.4s Yes
Operating System cisco ios_xe 3.12s Yes
Operating System cisco ios_xe 3.13.0as Yes
Operating System cisco ios_xe 3.13.0s Yes
Operating System cisco ios_xe 3.13.1s Yes
Operating System cisco ios_xe 3.13.2as Yes
Operating System cisco ios_xe 3.13.2s Yes
Operating System cisco ios_xe 3.13.3s Yes
Operating System cisco ios_xe 3.13.4s Yes
Operating System cisco ios_xe 3.13s Yes
Operating System cisco ios_xe 3.14.0s Yes
Operating System cisco ios_xe 3.14.1s Yes
Operating System cisco ios_xe 3.14.2s Yes
Operating System cisco ios_xe 3.14.3s Yes
Operating System cisco ios_xe 3.14.4s Yes
Operating System cisco ios_xe 3.14s Yes
Operating System cisco ios_xe 3.15.0s Yes
Operating System cisco ios_xe 3.15.1cs Yes
Operating System cisco ios_xe 3.15.1s Yes
Operating System cisco ios_xe 3.15.2s Yes
Operating System cisco ios_xe 3.15.3s Yes
Operating System cisco ios_xe 3.15s Yes
Operating System cisco ios_xe 3.16.0cs Yes
Operating System cisco ios_xe 3.16.0s Yes
Operating System cisco ios_xe 3.16.1as Yes
Operating System cisco ios_xe 3.16.1s Yes
Operating System cisco ios_xe 3.16s Yes
Operating System cisco ios_xe 3.17.0s Yes
Operating System cisco ios_xe 3.17.1as Yes
Operating System cisco ios_xe 3.17.1s Yes
Operating System cisco ios_xe 3.17.2s Yes
Operating System cisco ios_xe 3.17.3s Yes
Operating System cisco ios_xe 3.17s Yes

References