Vulnerability Details : CVE-2017-3865
A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from establishing, resulting in a denial of service (DoS) condition. Affected Products: ASR 5000 Series Routers, Virtualized Packet Core (VPC) Software. More Information: CSCvc21129. Known Affected Releases: 21.1.0 21.1.M0.65601 21.1.v0. Known Fixed Releases: 21.2.A0.65754 21.1.b0.66164 21.1.V0.66014 21.1.R0.65759 21.1.M0.65749 21.1.0.66030 21.1.0.
Vulnerability category: Denial of service
Products affected by CVE-2017-3865
- cpe:2.3:o:cisco:staros:21.0_m0.64702:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:staros:21.0_m0.64246:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:staros:21.0.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-3865
0.82%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 72 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-3865
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST | |
|
5.8
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L |
3.9
|
1.4
|
NIST |
References for CVE-2017-3865
-
http://www.securityfocus.com/bid/99218
Cisco StarOS for ASR 5500 Series Routers CVE-2017-3865 Remote Denial of Service VulnerabilityThird Party Advisory;VDB Entry
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-asr
Cisco StarOS for ASR 5000 Series Routers IPsec VPN Tunnel Denial of Service VulnerabilityVendor Advisory
-
http://www.securitytracker.com/id/1038748
Cisco ASR 5000 Series Routers IKE Processing Bug Lets Remote Users Deny Service - SecurityTrackerThird Party Advisory;VDB Entry
Jump to