CVE-2017-3881 : A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code i

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: (1) the failure to restrict the use of CMP-specific Telnet options only to internal, local communications between cluster members and instead accept and process such options over any Telnet connection to an affected device; and (2) the incorrect processing of malformed CMP-specific Telnet options. An attacker could exploit this vulnerability by sending malformed CMP-specific Telnet options while establishing a Telnet session with an affected Cisco device configured to accept Telnet connections. An exploit could allow an attacker to execute arbitrary code and obtain full control of the device or cause a reload of the affected device. This affects Catalyst switches, Embedded Service 2020 switches, Enhanced Layer 2 EtherSwitch Service Module, Enhanced Layer 2/3 EtherSwitch Service Module, Gigabit Ethernet Switch Module (CGESM) for HP, IE Industrial Ethernet switches, ME 4924-10GE switch, RF Gateway 10, and SM-X Layer 2/3 EtherSwitch Service Module. Cisco Bug IDs: CSCvd48893.

Published 2017-03-17 22:59:01

Updated 2020-08-07 20:08:15

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Input validationExecute code

Products affected by CVE-2017-3881

Cisco » IOS
Versions from including (>=) 12.2s and up to, including, (<=) 15.1\(3\)svs
cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Catalyst 2350-48td-s » Version: N/A
When used together with: Cisco » Catalyst 2350-48td-sd » Version: N/A
When used together with: Cisco » Catalyst 2360-48td-s » Version: N/A
When used together with: Cisco » Catalyst 2918-24tc-c » Version: N/A
When used together with: Cisco » Catalyst 2918-24tt-c » Version: N/A
When used together with: Cisco » Catalyst 2918-48tc-c » Version: N/A
When used together with: Cisco » Catalyst 2918-48tt-c » Version: N/A
When used together with: Cisco » Catalyst 2928-24tc-c » Version: N/A
When used together with: Cisco » Catalyst 2960-24-s » Version: N/A
When used together with: Cisco » Catalyst 2960-24lc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-24lt-l » Version: N/A
When used together with: Cisco » Catalyst 2960-24pc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-24pc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-24tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-24tc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-24tt-l » Version: N/A
When used together with: Cisco » Catalyst 2960-48pst-l » Version: N/A
When used together with: Cisco » Catalyst 2960-48pst-s » Version: N/A
When used together with: Cisco » Catalyst 2960-48tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-48tc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-48tt-l » Version: N/A
When used together with: Cisco » Catalyst 2960-48tt-s » Version: N/A
When used together with: Cisco » Catalyst 2960-8tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-8tc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 24lc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 24lc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 24pc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 24pc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 24tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 24tc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 48pst-l » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 48pst-s » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 48tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 48tc-s » Version: N/A
When used together with: Cisco » Catalyst 2960c-12pc-l » Version: N/A
When used together with: Cisco » Catalyst 2960c-8pc-l » Version: N/A
When used together with: Cisco » Catalyst 2960c-8tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960c-8tc-s » Version: N/A
When used together with: Cisco » Catalyst 2960cg-8tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960cpd-8pt-l » Version: N/A
When used together with: Cisco » Catalyst 2960cpd-8tt-l » Version: N/A
When used together with: Cisco » Catalyst 2960cx-8pc-l » Version: N/A
When used together with: Cisco » Catalyst 2960cx-8tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960g-24tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960g-48tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960g-8tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960l-16ps-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-16ts-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-24ps-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-24ts-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-48ps-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-48ts-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-8ps-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-8ts-ll » Version: N/A
When used together with: Cisco » Catalyst 2960pd-8tt-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-24pd-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-24ps-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-24td-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-24ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-24ts-s » Version: N/A
When used together with: Cisco » Catalyst 2960s-48fpd-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-48fps-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-48lpd-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-48lps-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-48td-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-48ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-48ts-s » Version: N/A
When used together with: Cisco » Catalyst 2960s-f24ps-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-f24ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-f24ts-s » Version: N/A
When used together with: Cisco » Catalyst 2960s-f48fps-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-f48lps-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-f48ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-f48ts-s » Version: N/A
When used together with: Cisco » Catalyst 2960x-24pd-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-24ps-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-24psq-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-24td-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-24ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-24ts-ll » Version: N/A
When used together with: Cisco » Catalyst 2960x-48fpd-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-48fps-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-48lpd-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-48lps-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-48td-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-48ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-48ts-ll » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24pd-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24pd-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24ps-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24ps-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24td-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24td-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24ts-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48fpd-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48fpd-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48fps-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48fps-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48lpd-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48lpd-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48lps-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48lps-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48td-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48td-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48ts-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48ts-l » Version: N/A
When used together with: Cisco » Catalyst 2970g-24t » Version: N/A
When used together with: Cisco » Catalyst 2970g-24ts » Version: N/A
When used together with: Cisco » Catalyst 2975 » Version: N/A
When used together with: Cisco » Catalyst 3550 12g » Version: N/A
When used together with: Cisco » Catalyst 3550 12t » Version: N/A
When used together with: Cisco » Catalyst 3550 24 Dc Smi » Version: N/A
When used together with: Cisco » Catalyst 3550 24 Emi » Version: N/A
When used together with: Cisco » Catalyst 3550 24 Fx Smi » Version: N/A
When used together with: Cisco » Catalyst 3550 24 Pwr » Version: N/A
When used together with: Cisco » Catalyst 3550 24 Smi » Version: N/A
When used together with: Cisco » Catalyst 3550 48 Emi » Version: N/A
When used together with: Cisco » Catalyst 3550 48 Smi » Version: N/A
When used together with: Cisco » Catalyst 3560-12pc-s » Version: N/A
When used together with: Cisco » Catalyst 3560-24ps » Version: N/A
When used together with: Cisco » Catalyst 3560-24ts » Version: N/A
When used together with: Cisco » Catalyst 3560-48ps » Version: N/A
When used together with: Cisco » Catalyst 3560-48ts » Version: N/A
When used together with: Cisco » Catalyst 3560-8pc » Version: N/A
When used together with: Cisco » Catalyst 3560c-12pc-s » Version: N/A
When used together with: Cisco » Catalyst 3560c-8pc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cg-8pc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cg-8tc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cpd-8pt-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-12pc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-12pd-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-12tc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-8pc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-8pt-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-8tc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-8xpd-s » Version: N/A
When used together with: Cisco » Catalyst 3560e-12d-e » Version: N/A
When used together with: Cisco » Catalyst 3560e-12d-s » Version: N/A
When used together with: Cisco » Catalyst 3560e-12sd-e » Version: N/A
When used together with: Cisco » Catalyst 3560e-12sd-s » Version: N/A
When used together with: Cisco » Catalyst 3560e-24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3560e-24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3560e-24td-e » Version: N/A
When used together with: Cisco » Catalyst 3560e-24td-s » Version: N/A
When used together with: Cisco » Catalyst 3560e-48pd-e » Version: N/A
When used together with: Cisco » Catalyst 3560e-48pd-ef » Version: N/A
When used together with: Cisco » Catalyst 3560e-48pd-s » Version: N/A
When used together with: Cisco » Catalyst 3560e-48pd-sf » Version: N/A
When used together with: Cisco » Catalyst 3560e-48td-e » Version: N/A
When used together with: Cisco » Catalyst 3560e-48td-s » Version: N/A
When used together with: Cisco » Catalyst 3560g-24ps » Version: N/A
When used together with: Cisco » Catalyst 3560g-24ts » Version: N/A
When used together with: Cisco » Catalyst 3560g-48ps » Version: N/A
When used together with: Cisco » Catalyst 3560g-48ts » Version: N/A
When used together with: Cisco » Catalyst 3560v2-24dc » Version: N/A
When used together with: Cisco » Catalyst 3560v2-24ps » Version: N/A
When used together with: Cisco » Catalyst 3560v2-24ts » Version: N/A
When used together with: Cisco » Catalyst 3560v2-48ps » Version: N/A
When used together with: Cisco » Catalyst 3560v2-48ts » Version: N/A
When used together with: Cisco » Catalyst 3560x-24p-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-24p-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-24p-s » Version: N/A
When used together with: Cisco » Catalyst 3560x-24t-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-24t-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-24t-s » Version: N/A
When used together with: Cisco » Catalyst 3560x-24u-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-24u-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-24u-s » Version: N/A
When used together with: Cisco » Catalyst 3560x-48p-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-48p-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-48p-s » Version: N/A
When used together with: Cisco » Catalyst 3560x-48pf-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-48pf-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-48pf-s » Version: N/A
When used together with: Cisco » Catalyst 3560x-48t-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-48t-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-48t-s » Version: N/A
When used together with: Cisco » Catalyst 3560x-48u-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-48u-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-48u-s » Version: N/A
When used together with: Cisco » Catalyst 3750-24fs » Version: N/A
When used together with: Cisco » Catalyst 3750-24ps » Version: N/A
When used together with: Cisco » Catalyst 3750-24ts » Version: N/A
When used together with: Cisco » Catalyst 3750-48ps » Version: N/A
When used together with: Cisco » Catalyst 3750-48ts » Version: N/A
When used together with: Cisco » Catalyst 3750 Metro 24-ac » Version: N/A
When used together with: Cisco » Catalyst 3750 Metro 24-dc » Version: N/A
When used together with: Cisco » Catalyst 3750e-24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3750e-24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3750e-24td-e » Version: N/A
When used together with: Cisco » Catalyst 3750e-24td-s » Version: N/A
When used together with: Cisco » Catalyst 3750e-48pd-e » Version: N/A
When used together with: Cisco » Catalyst 3750e-48pd-ef » Version: N/A
When used together with: Cisco » Catalyst 3750e-48pd-s » Version: N/A
When used together with: Cisco » Catalyst 3750e-48pd-sf » Version: N/A
When used together with: Cisco » Catalyst 3750e-48td-e » Version: N/A
When used together with: Cisco » Catalyst 3750e-48td-s » Version: N/A
When used together with: Cisco » Catalyst 3750g-12s » Version: N/A
When used together with: Cisco » Catalyst 3750g-12s-sd » Version: N/A
Cisco » Ios Xe
Versions from including (>=) 3.2sg and up to, including, (<=) 3.9e
cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Catalyst 2350-48td-s » Version: N/A
When used together with: Cisco » Catalyst 2350-48td-sd » Version: N/A
When used together with: Cisco » Catalyst 2360-48td-s » Version: N/A
When used together with: Cisco » Catalyst 2918-24tc-c » Version: N/A
When used together with: Cisco » Catalyst 2918-24tt-c » Version: N/A
When used together with: Cisco » Catalyst 2918-48tc-c » Version: N/A
When used together with: Cisco » Catalyst 2918-48tt-c » Version: N/A
When used together with: Cisco » Catalyst 2928-24tc-c » Version: N/A
When used together with: Cisco » Catalyst 2960-24-s » Version: N/A
When used together with: Cisco » Catalyst 2960-24lc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-24lt-l » Version: N/A
When used together with: Cisco » Catalyst 2960-24pc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-24pc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-24tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-24tc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-24tt-l » Version: N/A
When used together with: Cisco » Catalyst 2960-48pst-l » Version: N/A
When used together with: Cisco » Catalyst 2960-48pst-s » Version: N/A
When used together with: Cisco » Catalyst 2960-48tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-48tc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-48tt-l » Version: N/A
When used together with: Cisco » Catalyst 2960-48tt-s » Version: N/A
When used together with: Cisco » Catalyst 2960-8tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-8tc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 24lc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 24lc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 24pc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 24pc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 24tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 24tc-s » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 48pst-l » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 48pst-s » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 48tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960-plus 48tc-s » Version: N/A
When used together with: Cisco » Catalyst 2960c-12pc-l » Version: N/A
When used together with: Cisco » Catalyst 2960c-8pc-l » Version: N/A
When used together with: Cisco » Catalyst 2960c-8tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960c-8tc-s » Version: N/A
When used together with: Cisco » Catalyst 2960cg-8tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960cpd-8pt-l » Version: N/A
When used together with: Cisco » Catalyst 2960cpd-8tt-l » Version: N/A
When used together with: Cisco » Catalyst 2960cx-8pc-l » Version: N/A
When used together with: Cisco » Catalyst 2960cx-8tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960g-24tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960g-48tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960g-8tc-l » Version: N/A
When used together with: Cisco » Catalyst 2960l-16ps-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-16ts-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-24ps-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-24ts-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-48ps-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-48ts-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-8ps-ll » Version: N/A
When used together with: Cisco » Catalyst 2960l-8ts-ll » Version: N/A
When used together with: Cisco » Catalyst 2960pd-8tt-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-24pd-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-24ps-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-24td-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-24ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-24ts-s » Version: N/A
When used together with: Cisco » Catalyst 2960s-48fpd-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-48fps-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-48lpd-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-48lps-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-48td-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-48ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-48ts-s » Version: N/A
When used together with: Cisco » Catalyst 2960s-f24ps-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-f24ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-f24ts-s » Version: N/A
When used together with: Cisco » Catalyst 2960s-f48fps-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-f48lps-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-f48ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960s-f48ts-s » Version: N/A
When used together with: Cisco » Catalyst 2960x-24pd-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-24ps-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-24psq-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-24td-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-24ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-24ts-ll » Version: N/A
When used together with: Cisco » Catalyst 2960x-48fpd-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-48fps-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-48lpd-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-48lps-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-48td-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-48ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960x-48ts-ll » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24pd-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24pd-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24ps-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24ps-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24td-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24td-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24ts-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-24ts-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48fpd-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48fpd-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48fps-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48fps-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48lpd-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48lpd-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48lps-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48lps-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48td-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48td-l » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48ts-i » Version: N/A
When used together with: Cisco » Catalyst 2960xr-48ts-l » Version: N/A
When used together with: Cisco » Catalyst 2970g-24t » Version: N/A
When used together with: Cisco » Catalyst 2970g-24ts » Version: N/A
When used together with: Cisco » Catalyst 2975 » Version: N/A
When used together with: Cisco » Catalyst 3550 12g » Version: N/A
When used together with: Cisco » Catalyst 3550 12t » Version: N/A
When used together with: Cisco » Catalyst 3550 24 Dc Smi » Version: N/A
When used together with: Cisco » Catalyst 3550 24 Emi » Version: N/A
When used together with: Cisco » Catalyst 3550 24 Fx Smi » Version: N/A
When used together with: Cisco » Catalyst 3550 24 Pwr » Version: N/A
When used together with: Cisco » Catalyst 3550 24 Smi » Version: N/A
When used together with: Cisco » Catalyst 3550 48 Emi » Version: N/A
When used together with: Cisco » Catalyst 3550 48 Smi » Version: N/A
When used together with: Cisco » Catalyst 3560-12pc-s » Version: N/A
When used together with: Cisco » Catalyst 3560-24ps » Version: N/A
When used together with: Cisco » Catalyst 3560-24ts » Version: N/A
When used together with: Cisco » Catalyst 3560-48ps » Version: N/A
When used together with: Cisco » Catalyst 3560-48ts » Version: N/A
When used together with: Cisco » Catalyst 3560-8pc » Version: N/A
When used together with: Cisco » Catalyst 3560c-12pc-s » Version: N/A
When used together with: Cisco » Catalyst 3560c-8pc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cg-8pc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cg-8tc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cpd-8pt-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-12pc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-12pd-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-12tc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-8pc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-8pt-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-8tc-s » Version: N/A
When used together with: Cisco » Catalyst 3560cx-8xpd-s » Version: N/A
When used together with: Cisco » Catalyst 3560e-12d-e » Version: N/A
When used together with: Cisco » Catalyst 3560e-12d-s » Version: N/A
When used together with: Cisco » Catalyst 3560e-12sd-e » Version: N/A
When used together with: Cisco » Catalyst 3560e-12sd-s » Version: N/A
When used together with: Cisco » Catalyst 3560e-24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3560e-24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3560e-24td-e » Version: N/A
When used together with: Cisco » Catalyst 3560e-24td-s » Version: N/A
When used together with: Cisco » Catalyst 3560e-48pd-e » Version: N/A
When used together with: Cisco » Catalyst 3560e-48pd-ef » Version: N/A
When used together with: Cisco » Catalyst 3560e-48pd-s » Version: N/A
When used together with: Cisco » Catalyst 3560e-48pd-sf » Version: N/A
When used together with: Cisco » Catalyst 3560e-48td-e » Version: N/A
When used together with: Cisco » Catalyst 3560e-48td-s » Version: N/A
When used together with: Cisco » Catalyst 3560g-24ps » Version: N/A
When used together with: Cisco » Catalyst 3560g-24ts » Version: N/A
When used together with: Cisco » Catalyst 3560g-48ps » Version: N/A
When used together with: Cisco » Catalyst 3560g-48ts » Version: N/A
When used together with: Cisco » Catalyst 3560v2-24dc » Version: N/A
When used together with: Cisco » Catalyst 3560v2-24ps » Version: N/A
When used together with: Cisco » Catalyst 3560v2-24ts » Version: N/A
When used together with: Cisco » Catalyst 3560v2-48ps » Version: N/A
When used together with: Cisco » Catalyst 3560v2-48ts » Version: N/A
When used together with: Cisco » Catalyst 3560x-24p-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-24p-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-24p-s » Version: N/A
When used together with: Cisco » Catalyst 3560x-24t-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-24t-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-24t-s » Version: N/A
When used together with: Cisco » Catalyst 3560x-24u-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-24u-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-24u-s » Version: N/A
When used together with: Cisco » Catalyst 3560x-48p-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-48p-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-48p-s » Version: N/A
When used together with: Cisco » Catalyst 3560x-48pf-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-48pf-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-48pf-s » Version: N/A
When used together with: Cisco » Catalyst 3560x-48t-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-48t-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-48t-s » Version: N/A
When used together with: Cisco » Catalyst 3560x-48u-e » Version: N/A
When used together with: Cisco » Catalyst 3560x-48u-l » Version: N/A
When used together with: Cisco » Catalyst 3560x-48u-s » Version: N/A
When used together with: Cisco » Catalyst 3750-24fs » Version: N/A
When used together with: Cisco » Catalyst 3750-24ps » Version: N/A
When used together with: Cisco » Catalyst 3750-24ts » Version: N/A
When used together with: Cisco » Catalyst 3750-48ps » Version: N/A
When used together with: Cisco » Catalyst 3750-48ts » Version: N/A
When used together with: Cisco » Catalyst 3750 Metro 24-ac » Version: N/A
When used together with: Cisco » Catalyst 3750 Metro 24-dc » Version: N/A
When used together with: Cisco » Catalyst 3750e-24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3750e-24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3750e-24td-e » Version: N/A
When used together with: Cisco » Catalyst 3750e-24td-s » Version: N/A
When used together with: Cisco » Catalyst 3750e-48pd-e » Version: N/A
When used together with: Cisco » Catalyst 3750e-48pd-ef » Version: N/A
When used together with: Cisco » Catalyst 3750e-48pd-s » Version: N/A
When used together with: Cisco » Catalyst 3750e-48pd-sf » Version: N/A
When used together with: Cisco » Catalyst 3750e-48td-e » Version: N/A
When used together with: Cisco » Catalyst 3750e-48td-s » Version: N/A
When used together with: Cisco » Catalyst 3750g-12s » Version: N/A
When used together with: Cisco » Catalyst 3750g-12s-sd » Version: N/A

Max 200 conditions are displayed on this page, to prevent potential performance issues, please refer to NVD for more details.

CVE-2017-3881 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Cisco IOS and IOS XE Remote Code Execution Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2017-3881

Added on 2022-03-25 Action due date 2022-04-15

Exploit prediction scoring system (EPSS) score for CVE-2017-3881

EPSS FAQ

97.48%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 100 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2017-3881

Cisco IOS Telnet Denial of Service

Disclosure Date: 2017-03-17

First seen: 2020-04-26

auxiliary/dos/cisco/ios_telnet_rocem

This module triggers a Denial of Service condition in the Cisco IOS telnet service affecting multiple Cisco switches. Tested against Cisco Catalyst 2960 and 3750. Authors: - Artem Kondratenko

More information

CVSS scores for CVE-2017-3881

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2017-3881

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-3881

http://www.securityfocus.com/bid/97391

RETIRED: Multiple Rockwell Automation Products CVE-2017-3881 Remote Code Execution Vulnerability
Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1038059

Cisco IOS/IOS XE Cluster Management Protocol Lets Remote Users Deny Service and Execute Arbitrary Code on the Target System - SecurityTracker
Third Party Advisory;VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp

Cisco IOS and IOS XE Software Cluster Management Protocol Remote Code Execution Vulnerability
Vendor Advisory
https://www.exploit-db.com/exploits/41872/

Cisco Catalyst 2960 IOS 12.2(55)SE11 - 'ROCEM' Remote Code Execution
Exploit;Third Party Advisory;VDB Entry
http://www.securityfocus.com/bid/96960

Cisco IOS and IOS XE Software CVE-2017-3881 Remote Code Execution Vulnerability
Third Party Advisory;VDB Entry
https://www.exploit-db.com/exploits/41874/

404 Page Not Found | Exploit Database
Broken Link

Jump to

Vulnerability Details : CVE-2017-3881