Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-3881


A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: (1) the failure to restrict the use of CMP-specific Telnet options only to internal, local communications between cluster members and instead accept and process such options over any Telnet connection to an affected device; and (2) the incorrect processing of malformed CMP-specific Telnet options. An attacker could exploit this vulnerability by sending malformed CMP-specific Telnet options while establishing a Telnet session with an affected Cisco device configured to accept Telnet connections. An exploit could allow an attacker to execute arbitrary code and obtain full control of the device or cause a reload of the affected device. This affects Catalyst switches, Embedded Service 2020 switches, Enhanced Layer 2 EtherSwitch Service Module, Enhanced Layer 2/3 EtherSwitch Service Module, Gigabit Ethernet Switch Module (CGESM) for HP, IE Industrial Ethernet switches, ME 4924-10GE switch, RF Gateway 10, and SM-X Layer 2/3 EtherSwitch Service Module. Cisco Bug IDs: CSCvd48893.


Published

2017-03-17T22:59:00.640

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-20

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios ≤ 15.1\(3\)svs Yes
Operating System cisco ios_xe ≤ 3.9e Yes
Hardware cisco catalyst_2350-48td-s - No
Hardware cisco catalyst_2350-48td-sd - No
Hardware cisco catalyst_2360-48td-s - No
Hardware cisco catalyst_2918-24tc-c - No
Hardware cisco catalyst_2918-24tt-c - No
Hardware cisco catalyst_2918-48tc-c - No
Hardware cisco catalyst_2918-48tt-c - No
Hardware cisco catalyst_2928-24tc-c - No
Hardware cisco catalyst_2960-24-s - No
Hardware cisco catalyst_2960-24lc-s - No
Hardware cisco catalyst_2960-24lt-l - No
Hardware cisco catalyst_2960-24pc-l - No
Hardware cisco catalyst_2960-24pc-s - No
Hardware cisco catalyst_2960-24tc-l - No
Hardware cisco catalyst_2960-24tc-s - No
Hardware cisco catalyst_2960-24tt-l - No
Hardware cisco catalyst_2960-48pst-l - No
Hardware cisco catalyst_2960-48pst-s - No
Hardware cisco catalyst_2960-48tc-l - No
Hardware cisco catalyst_2960-48tc-s - No
Hardware cisco catalyst_2960-48tt-l - No
Hardware cisco catalyst_2960-48tt-s - No
Hardware cisco catalyst_2960-8tc-l - No
Hardware cisco catalyst_2960-8tc-s - No
Hardware cisco catalyst_2960-plus_24lc-l - No
Hardware cisco catalyst_2960-plus_24lc-s - No
Hardware cisco catalyst_2960-plus_24pc-l - No
Hardware cisco catalyst_2960-plus_24pc-s - No
Hardware cisco catalyst_2960-plus_24tc-l - No
Hardware cisco catalyst_2960-plus_24tc-s - No
Hardware cisco catalyst_2960-plus_48pst-l - No
Hardware cisco catalyst_2960-plus_48pst-s - No
Hardware cisco catalyst_2960-plus_48tc-l - No
Hardware cisco catalyst_2960-plus_48tc-s - No
Hardware cisco catalyst_2960c-12pc-l - No
Hardware cisco catalyst_2960c-8pc-l - No
Hardware cisco catalyst_2960c-8tc-l - No
Hardware cisco catalyst_2960c-8tc-s - No
Hardware cisco catalyst_2960cg-8tc-l - No
Hardware cisco catalyst_2960cpd-8pt-l - No
Hardware cisco catalyst_2960cpd-8tt-l - No
Hardware cisco catalyst_2960cx-8pc-l - No
Hardware cisco catalyst_2960cx-8tc-l - No
Hardware cisco catalyst_2960g-24tc-l - No
Hardware cisco catalyst_2960g-48tc-l - No
Hardware cisco catalyst_2960g-8tc-l - No
Hardware cisco catalyst_2960l-16ps-ll - No
Hardware cisco catalyst_2960l-16ts-ll - No
Hardware cisco catalyst_2960l-24ps-ll - No
Hardware cisco catalyst_2960l-24ts-ll - No
Hardware cisco catalyst_2960l-48ps-ll - No
Hardware cisco catalyst_2960l-48ts-ll - No
Hardware cisco catalyst_2960l-8ps-ll - No
Hardware cisco catalyst_2960l-8ts-ll - No
Hardware cisco catalyst_2960pd-8tt-l - No
Hardware cisco catalyst_2960s-24pd-l - No
Hardware cisco catalyst_2960s-24ps-l - No
Hardware cisco catalyst_2960s-24td-l - No
Hardware cisco catalyst_2960s-24ts-l - No
Hardware cisco catalyst_2960s-24ts-s - No
Hardware cisco catalyst_2960s-48fpd-l - No
Hardware cisco catalyst_2960s-48fps-l - No
Hardware cisco catalyst_2960s-48lpd-l - No
Hardware cisco catalyst_2960s-48lps-l - No
Hardware cisco catalyst_2960s-48td-l - No
Hardware cisco catalyst_2960s-48ts-l - No
Hardware cisco catalyst_2960s-48ts-s - No
Hardware cisco catalyst_2960s-f24ps-l - No
Hardware cisco catalyst_2960s-f24ts-l - No
Hardware cisco catalyst_2960s-f24ts-s - No
Hardware cisco catalyst_2960s-f48fps-l - No
Hardware cisco catalyst_2960s-f48lps-l - No
Hardware cisco catalyst_2960s-f48ts-l - No
Hardware cisco catalyst_2960s-f48ts-s - No
Hardware cisco catalyst_2960x-24pd-l - No
Hardware cisco catalyst_2960x-24ps-l - No
Hardware cisco catalyst_2960x-24psq-l - No
Hardware cisco catalyst_2960x-24td-l - No
Hardware cisco catalyst_2960x-24ts-l - No
Hardware cisco catalyst_2960x-24ts-ll - No
Hardware cisco catalyst_2960x-48fpd-l - No
Hardware cisco catalyst_2960x-48fps-l - No
Hardware cisco catalyst_2960x-48lpd-l - No
Hardware cisco catalyst_2960x-48lps-l - No
Hardware cisco catalyst_2960x-48td-l - No
Hardware cisco catalyst_2960x-48ts-l - No
Hardware cisco catalyst_2960x-48ts-ll - No
Hardware cisco catalyst_2960xr-24pd-i - No
Hardware cisco catalyst_2960xr-24pd-l - No
Hardware cisco catalyst_2960xr-24ps-i - No
Hardware cisco catalyst_2960xr-24ps-l - No
Hardware cisco catalyst_2960xr-24td-i - No
Hardware cisco catalyst_2960xr-24td-l - No
Hardware cisco catalyst_2960xr-24ts-i - No
Hardware cisco catalyst_2960xr-24ts-l - No
Hardware cisco catalyst_2960xr-48fpd-i - No
Hardware cisco catalyst_2960xr-48fpd-l - No
Hardware cisco catalyst_2960xr-48fps-i - No
Hardware cisco catalyst_2960xr-48fps-l - No
Hardware cisco catalyst_2960xr-48lpd-i - No
Hardware cisco catalyst_2960xr-48lpd-l - No
Hardware cisco catalyst_2960xr-48lps-i - No
Hardware cisco catalyst_2960xr-48lps-l - No
Hardware cisco catalyst_2960xr-48td-i - No
Hardware cisco catalyst_2960xr-48td-l - No
Hardware cisco catalyst_2960xr-48ts-i - No
Hardware cisco catalyst_2960xr-48ts-l - No
Hardware cisco catalyst_2970g-24t - No
Hardware cisco catalyst_2970g-24ts - No
Hardware cisco catalyst_2975 - No
Hardware cisco catalyst_3550_12g - No
Hardware cisco catalyst_3550_12t - No
Hardware cisco catalyst_3550_24_dc_smi - No
Hardware cisco catalyst_3550_24_emi - No
Hardware cisco catalyst_3550_24_fx_smi - No
Hardware cisco catalyst_3550_24_pwr - No
Hardware cisco catalyst_3550_24_smi - No
Hardware cisco catalyst_3550_48_emi - No
Hardware cisco catalyst_3550_48_smi - No
Hardware cisco catalyst_3560-12pc-s - No
Hardware cisco catalyst_3560-24ps - No
Hardware cisco catalyst_3560-24ts - No
Hardware cisco catalyst_3560-48ps - No
Hardware cisco catalyst_3560-48ts - No
Hardware cisco catalyst_3560-8pc - No
Hardware cisco catalyst_3560c-12pc-s - No
Hardware cisco catalyst_3560c-8pc-s - No
Hardware cisco catalyst_3560cg-8pc-s - No
Hardware cisco catalyst_3560cg-8tc-s - No
Hardware cisco catalyst_3560cpd-8pt-s - No
Hardware cisco catalyst_3560cx-12pc-s - No
Hardware cisco catalyst_3560cx-12pd-s - No
Hardware cisco catalyst_3560cx-12tc-s - No
Hardware cisco catalyst_3560cx-8pc-s - No
Hardware cisco catalyst_3560cx-8pt-s - No
Hardware cisco catalyst_3560cx-8tc-s - No
Hardware cisco catalyst_3560cx-8xpd-s - No
Hardware cisco catalyst_3560e-12d-e - No
Hardware cisco catalyst_3560e-12d-s - No
Hardware cisco catalyst_3560e-12sd-e - No
Hardware cisco catalyst_3560e-12sd-s - No
Hardware cisco catalyst_3560e-24pd-e - No
Hardware cisco catalyst_3560e-24pd-s - No
Hardware cisco catalyst_3560e-24td-e - No
Hardware cisco catalyst_3560e-24td-s - No
Hardware cisco catalyst_3560e-48pd-e - No
Hardware cisco catalyst_3560e-48pd-ef - No
Hardware cisco catalyst_3560e-48pd-s - No
Hardware cisco catalyst_3560e-48pd-sf - No
Hardware cisco catalyst_3560e-48td-e - No
Hardware cisco catalyst_3560e-48td-s - No
Hardware cisco catalyst_3560g-24ps - No
Hardware cisco catalyst_3560g-24ts - No
Hardware cisco catalyst_3560g-48ps - No
Hardware cisco catalyst_3560g-48ts - No
Hardware cisco catalyst_3560v2-24dc - No
Hardware cisco catalyst_3560v2-24ps - No
Hardware cisco catalyst_3560v2-24ts - No
Hardware cisco catalyst_3560v2-48ps - No
Hardware cisco catalyst_3560v2-48ts - No
Hardware cisco catalyst_3560x-24p-e - No
Hardware cisco catalyst_3560x-24p-l - No
Hardware cisco catalyst_3560x-24p-s - No
Hardware cisco catalyst_3560x-24t-e - No
Hardware cisco catalyst_3560x-24t-l - No
Hardware cisco catalyst_3560x-24t-s - No
Hardware cisco catalyst_3560x-24u-e - No
Hardware cisco catalyst_3560x-24u-l - No
Hardware cisco catalyst_3560x-24u-s - No
Hardware cisco catalyst_3560x-48p-e - No
Hardware cisco catalyst_3560x-48p-l - No
Hardware cisco catalyst_3560x-48p-s - No
Hardware cisco catalyst_3560x-48pf-e - No
Hardware cisco catalyst_3560x-48pf-l - No
Hardware cisco catalyst_3560x-48pf-s - No
Hardware cisco catalyst_3560x-48t-e - No
Hardware cisco catalyst_3560x-48t-l - No
Hardware cisco catalyst_3560x-48t-s - No
Hardware cisco catalyst_3560x-48u-e - No
Hardware cisco catalyst_3560x-48u-l - No
Hardware cisco catalyst_3560x-48u-s - No
Hardware cisco catalyst_3750-24fs - No
Hardware cisco catalyst_3750-24ps - No
Hardware cisco catalyst_3750-24ts - No
Hardware cisco catalyst_3750-48ps - No
Hardware cisco catalyst_3750-48ts - No
Hardware cisco catalyst_3750_metro_24-ac - No
Hardware cisco catalyst_3750_metro_24-dc - No
Hardware cisco catalyst_3750e-24pd-e - No
Hardware cisco catalyst_3750e-24pd-s - No
Hardware cisco catalyst_3750e-24td-e - No
Hardware cisco catalyst_3750e-24td-s - No
Hardware cisco catalyst_3750e-48pd-e - No
Hardware cisco catalyst_3750e-48pd-ef - No
Hardware cisco catalyst_3750e-48pd-s - No
Hardware cisco catalyst_3750e-48pd-sf - No
Hardware cisco catalyst_3750e-48td-e - No
Hardware cisco catalyst_3750e-48td-s - No
Hardware cisco catalyst_3750g-12s - No
Hardware cisco catalyst_3750g-12s-sd - No
Hardware cisco catalyst_3750g-16td - No
Hardware cisco catalyst_3750g-24ps - No
Hardware cisco catalyst_3750g-24t - No
Hardware cisco catalyst_3750g-24ts - No
Hardware cisco catalyst_3750g-24ts-1u - No
Hardware cisco catalyst_3750g-48ps - No
Hardware cisco catalyst_3750g-48ts - No
Hardware cisco catalyst_3750v2-24fs - No
Hardware cisco catalyst_3750v2-24ps - No
Hardware cisco catalyst_3750v2-24ts - No
Hardware cisco catalyst_3750v2-48ps - No
Hardware cisco catalyst_3750v2-48ts - No
Hardware cisco catalyst_3750x-12s-e - No
Hardware cisco catalyst_3750x-12s-s - No
Hardware cisco catalyst_3750x-24p-e - No
Hardware cisco catalyst_3750x-24p-l - No
Hardware cisco catalyst_3750x-24p-s - No
Hardware cisco catalyst_3750x-24s-e - No
Hardware cisco catalyst_3750x-24s-s - No
Hardware cisco catalyst_3750x-24t-e - No
Hardware cisco catalyst_3750x-24t-l - No
Hardware cisco catalyst_3750x-24t-s - No
Hardware cisco catalyst_3750x-24u-e - No
Hardware cisco catalyst_3750x-24u-l - No
Hardware cisco catalyst_3750x-24u-s - No
Hardware cisco catalyst_3750x-48p-e - No
Hardware cisco catalyst_3750x-48p-l - No
Hardware cisco catalyst_3750x-48p-s - No
Hardware cisco catalyst_3750x-48pf-e - No
Hardware cisco catalyst_3750x-48pf-l - No
Hardware cisco catalyst_3750x-48pf-s - No
Hardware cisco catalyst_3750x-48t-e - No
Hardware cisco catalyst_3750x-48t-l - No
Hardware cisco catalyst_3750x-48t-s - No
Hardware cisco catalyst_3750x-48u-e - No
Hardware cisco catalyst_3750x-48u-l - No
Hardware cisco catalyst_3750x-48u-s - No
Hardware cisco catalyst_4000_supervisor_engine_i - No
Hardware cisco catalyst_4000_supervisor_engine_iv - No
Hardware cisco catalyst_4000_supervisor_engine_v - No
Hardware cisco catalyst_4500_supervisor_engine_6-e - No
Hardware cisco catalyst_4500_supervisor_engine_6l-e - No
Hardware cisco catalyst_4500_supervisor_engine_ii-plus - No
Hardware cisco catalyst_4500_supervisor_engine_ii-plus-ts - No
Hardware cisco catalyst_4500_supervisor_engine_iv - No
Hardware cisco catalyst_4500_supervisor_engine_v - No
Hardware cisco catalyst_4500_supervisor_engine_v-10ge - No
Hardware cisco catalyst_4500_supervisor_ii-plus-10ge - No
Hardware cisco catalyst_4500e_supervisor_engine_8-e - No
Hardware cisco catalyst_4900m - No
Hardware cisco catalyst_4928_10_gigabit_ethernet_switch - No
Hardware cisco catalyst_4948 - No
Hardware cisco catalyst_4948_10_gigabit_ethernet_switch - No
Hardware cisco catalyst_4948e-f_ethernet_switch - No
Hardware cisco catalyst_4948e_ethernet_switch - No
Hardware cisco catalyst_blade_switch_3020 - No
Hardware cisco catalyst_blade_switch_3030 - No
Hardware cisco catalyst_blade_switch_3032 - No
Hardware cisco catalyst_blade_switch_3040 - No
Hardware cisco catalyst_blade_switch_3120 - No
Hardware cisco catalyst_blade_switch_3120x - No
Hardware cisco catalyst_blade_switch_3130 - No
Hardware cisco catalyst_c2928-24lt-c - No
Hardware cisco catalyst_c2928-48tc-c - No
Hardware cisco catalyst_switch_module_3012 - No
Hardware cisco catalyst_switch_module_3110 - No
Hardware cisco catalyst_switch_module_3110x - No
Hardware cisco embedded_service_2020_24tc_con - No
Hardware cisco embedded_service_2020_24tc_con_b - No
Hardware cisco embedded_service_2020_24tc_ncp - No
Hardware cisco embedded_service_2020_24tc_ncp_b - No
Hardware cisco embedded_service_2020_con - No
Hardware cisco embedded_service_2020_con_b - No
Hardware cisco embedded_service_2020_ncp - No
Hardware cisco embedded_service_2020_ncp_b - No
Hardware cisco enhanced_layer_2\/3_etherswitch_service_module - No
Hardware cisco enhanced_layer_2_etherswitch_service_module - No
Hardware cisco gigabit_ethernet_switch_module_\(cgesm\) - No
Hardware cisco ie-3010-16s-8pc_industrial_ethernet_switch - No
Hardware cisco ie-3010-24tc_industrial_ethernet_switch - No
Hardware cisco ie-4000-16gt4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-16t4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-4gc4gp4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-4gs8gp4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-4s8p4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-4t4p4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-4tc4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-8gs4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-8gt4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-8gt8gp4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-8s4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-8t4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4010-16s12p_industrial_ethernet_switch - No
Hardware cisco ie-4010-4s24p_industrial_ethernet_switch - No
Hardware cisco ie-5000-12s12p-10g_industrial_ethernet_switch - No
Hardware cisco ie-5000-16s12p_industrial_ethernet_switch - No
Hardware cisco ie_2000-16ptc-g_industrial_ethernet_switch - No
Hardware cisco ie_2000-16t67_industrial_ethernet_switch - No
Hardware cisco ie_2000-16t67p_industrial_ethernet_switch - No
Hardware cisco ie_2000-16tc-g-e_industrial_ethernet_switch - No
Hardware cisco ie_2000-16tc-g-n_industrial_ethernet_switch - No
Hardware cisco ie_2000-16tc-g-x_industrial_ethernet_switch - No
Hardware cisco ie_2000-16tc-g_industrial_ethernet_switch - No
Hardware cisco ie_2000-16tc_industrial_ethernet_switch - No
Hardware cisco ie_2000-24t67_industrial_ethernet_switch - No
Hardware cisco ie_2000-4s-ts-g_industrial_ethernet_switch - No
Hardware cisco ie_2000-4t-g_industrial_ethernet_switch - No
Hardware cisco ie_2000-4t_industrial_ethernet_switch - No
Hardware cisco ie_2000-4ts-g_industrial_ethernet_switch - No
Hardware cisco ie_2000-4ts_industrial_ethernet_switch - No
Hardware cisco ie_2000-8t67_industrial_ethernet_switch - No
Hardware cisco ie_2000-8t67p_industrial_ethernet_switch - No
Hardware cisco ie_2000-8tc-g-e_industrial_ethernet_switch - No
Hardware cisco ie_2000-8tc-g-n_industrial_ethernet_switch - No
Hardware cisco ie_2000-8tc-g_industrial_ethernet_switch - No
Hardware cisco ie_2000-8tc_industrial_ethernet_switch - No
Hardware cisco ie_3000-4tc_industrial_ethernet_switch - No
Hardware cisco ie_3000-8tc_industrial_ethernet_switch - No
Hardware cisco me_4924-10ge - No
Hardware cisco rf_gateway_10 - No
Hardware cisco sm-x_layer_2\/3_etherswitch_service_module - No

References