Lucene search

[email protected]CVE-2017-3879

HistoryMar 17, 2017 - 10:59 p.m.

CVE-2017-3879

2017-03-1722:59:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2017-3879

dos vulnerability

cisco nx-os software

nexus 9000 series

remote login

telnet

ssh

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%

JSON

A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user traffic flowing through the device. The attacker could use either a Telnet or an SSH client for the remote login attempt. Affected Products: This vulnerability affects Cisco Nexus 9000 Series Switches that are running Cisco NX-OS Software and are configured to allow remote Telnet connections to the device. More Information: CSCuy25824. Known Affected Releases: 7.0(3)I3(1) 8.3(0)CV(0.342) 8.3(0)CV(0.345). Known Fixed Releases: 8.3(0)CV(0.362) 8.0(1) 7.0(3)IED5(0.19) 7.0(3)IED5(0) 7.0(3)I4(1) 7.0(3)I4(0.8) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1) 7.0(3)F1(0.230).

Affected configurations

NVD

Node

cisconx-osMatch7.0\(3\)i3\(0.170\)

cisconx-osMatch8.3\(0\)cv\(0.342\)

cisconx-osMatch8.3\(0\)cv\(0.345\)

AND

cisconexus_92160yc_switchMatch-

cisconexus_92300yc_switchMatch-

cisconexus_92304qc_switchMatch-

cisconexus_9236c_switchMatch-

cisconexus_9272q_switchMatch-

cisconexus_93108tc-ex_switchMatch-

cisconexus_93120tx_switchMatch-

cisconexus_93128tx_switchMatch-

cisconexus_93180lc-ex_switchMatch-

cisconexus_93180yc-ex_switchMatch-

cisconexus_9332pq_switchMatch-

cisconexus_9336pq_aci_spine_switchMatch-

cisconexus_9372px-e_switchMatch-

cisconexus_9372px_switchMatch-

cisconexus_9372tx-e_switchMatch-

cisconexus_9372tx_switchMatch-

cisconexus_9396px_switchMatch-

cisconexus_9396tx_switchMatch-

cisconexus_9508_switchMatch-

CPENameOperatorVersion
cisco:nx-oscisco nx-oseq7.0\(3\)i3\(0.170\)
cisco:nx-oscisco nx-oseq8.3\(0\)cv\(0.342\)
cisco:nx-oscisco nx-oseq8.3\(0\)cv\(0.345\)

CPE	Name	Operator	Version
cisco:nx-os	cisco nx-os	eq	7.0\(3\)i3\(0.170\)
cisco:nx-os	cisco nx-os	eq	8.3\(0\)cv\(0.342\)
cisco:nx-os	cisco nx-os	eq	8.3\(0\)cv\(0.345\)

CNA Affected

[
  {
    "product": "Cisco Nexus 9000 Series Switches",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Nexus 9000 Series Switches"
      }
    ]
  }
]

References

www.securityfocus.com/bid/96920

www.securitytracker.com/id/1038046

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-nss1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%

JSON

Related for CVE-2017-3879

nvd1 nessus2 prion1 cisco1 cvelist1 openvas1