Vulnerability Details : CVE-2017-3824
A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition. Cisco cBR-8 Converged Broadband Routers running vulnerable versions of Cisco IOS XE are affected. More Information: CSCux40637. Known Affected Releases: 15.5(3)S 15.6(1)S. Known Fixed Releases: 15.5(3)S2 15.6(1)S1 15.6(2)S 15.6(2)SP 16.4(1).
Vulnerability category: OverflowDenial of service
Products affected by CVE-2017-3824
- cpe:2.3:o:cisco:ios_xe:3.16.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:3.16.0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios_xe:3.17.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-3824
0.43%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 60 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-3824
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.4
|
MEDIUM | AV:N/AC:H/Au:N/C:N/I:N/A:C |
4.9
|
6.9
|
NIST | |
|
6.8
|
MEDIUM | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H |
2.2
|
4.0
|
NIST |
CWE ids for CVE-2017-3824
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2017-3824
-
http://www.securitytracker.com/id/1037774
Cisco IOS XE on cBR-8 Converged Broadband Routers PCCM Packet Memory Corruption Error Lets Remote Users Cause the Target System to Crash - SecurityTracker
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-cbr
Cisco cBR Series Converged Broadband Routers List Headers Denial of Service VulnerabilityVendor Advisory
-
http://www.securityfocus.com/bid/95937
Cisco cBR Series Converged Broadband Routers CVE-2017-3824 Denial of Service VulnerabilityThird Party Advisory;VDB Entry
Jump to