Disable TELNET! Cisco finds 0-Day in CIA Dump affecting over 300 Network Switch Models

🗓️ 19 Mar 2017 21:20:00Reported by Swati KhandelwalType

thn

thn🔗 thehackernews.com👁 341 Views

Cisco 0-Day IOS vulnerability in 300+ switch models; CMP protocol allows remote code execution via Telnet

Reporter	Title	Published	Views	Family All 42
0day.today	Cisco Catalyst 2960 IOS 12.2(55)SE11 - ROCEM Remote Code Execution Exploit	12 Apr 201700:00	–	zdt
0day.today	Cisco Catalyst 2960 IOS 12.2(55)SE1 - ROCEM Remote Code Execution Exploit	6 Jun 201700:00	–	zdt
Tenable Nessus	Cisco IOS Denilal of Service (DoS) attack attempt	6 Jun 201700:00	–	nessus
Tenable Nessus	Cisco IOS Cluster Management Protocol Telnet Option Handling RCE (cisco-sa-20170317-cmp) (destructive check)	11 Oct 201700:00	–	nessus
Tenable Nessus	Cisco IOS Cluster Management Protocol Telnet Option Handling RCE (cisco-sa-20170317-cmp)	27 Mar 201700:00	–	nessus
Tenable Nessus	Cisco IOS XE Cluster Management Protocol Telnet Option Handling RCE (cisco-sa-20170317-cmp)	27 Mar 201700:00	–	nessus
ATTACKERKB	CVE-2017-3881	17 Mar 201700:00	–	attackerkb
BDU FSTEC	The vulnerability of Cisco Systems Inc.’s network devices allows attackers to execute arbitrary code or cause service interruptions.	24 Mar 201700:00	–	bdu_fstec
GithubExploit	Exploit for Improper Input Validation in Cisco Ios	10 Apr 201703:44	–	githubexploit
Circl	CVE-2017-3881	29 Mar 201708:04	–	circl

20 Mar 2017 08:20Current

9.5High risk

Vulners AI Score9.5

EPSS0.98975

cisco 0-day ios vulnerability switch models cmp protocol remote code execution telnet ssh unpatched vulnerability