Lucene search

CiscoCVE-2017-3820

HistoryFeb 03, 2017 - 7:59 a.m.

CVE-2017-3820

2017-02-0307:59:00

CWE-665

cisco

web.nvd.nist.gov

cisco

asr 1000

snmp

vulnerability

high cpu usage

dos

nvd

cve-2017-3820

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.002

Percentile

58.8%

JSON

A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S, or 3.17.1S could allow an authenticated, remote attacker to cause high CPU usage on an affected device, resulting in a denial of service (DoS) condition. More Information: CSCux68796. Known Affected Releases: 15.5(3)S2.1 15.6(1)S1.1. Known Fixed Releases: 15.4(3)S6.1 15.4(3)S6.2 15.5(3)S2.2 15.5(3)S3 15.6(0.22)S0.23 15.6(1)S2 16.2(0.295) 16.3(0.94) 15.5.3S3.

Affected configurations

Nvd

Node

ciscoios_xeMatch3.13.6s

ciscoios_xeMatch3.16.2s

ciscoios_xeMatch3.17.1s

VendorProductVersionCPE
ciscoios_xe3.13.6scpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*
ciscoios_xe3.16.2scpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*
ciscoios_xe3.17.1scpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe	3.13.6s	cpe:2.3:o:cisco:ios_xe:3.13.6s:::::::*
cisco	ios_xe	3.16.2s	cpe:2.3:o:cisco:ios_xe:3.16.2s:::::::*
cisco	ios_xe	3.17.1s	cpe:2.3:o:cisco:ios_xe:3.17.1s:::::::*

CNA Affected

[
  {
    "product": "Cisco IOS XE 15.x",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco IOS XE 15.x"
      }
    ]
  }
]

References

www.securityfocus.com/bid/95934

www.securitytracker.com/id/1037770

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-asrsnmp

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.002

Percentile

58.8%

JSON

Related for CVE-2017-3820