CVE-2017-3878

Published Mar 17, 2017

Last updated 7 years ago

Overview

Description: A Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a Telnet process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user traffic flowing through the device. Affected Products: This vulnerability affects Cisco Nexus 9000 Series Switches that are running Cisco NX-OS Software and are configured to allow remote Telnet connections to the device. More Information: CSCux46778. Known Affected Releases: 7.0(3)I3(0.170). Known Fixed Releases: 7.0(3)I3(1) 7.0(3)I3(0.257) 7.0(3)I3(0.255) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1).
Source: ykramarz@cisco.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 3.0

Type: Primary
Base score: 5.3
Impact score: 1.4
Exploitability score: 3.9
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Severity: MEDIUM

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: CWE-119

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i3\\(0.170\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2AC5F341-81B9-472D-9AB9-8B04F84EF1B2"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:cisco:nexus_92160yc_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "AF9147C9-5D8B-40F5-9AAA-66A3495A0AD8"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_92300yc_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "3AA5389A-8AD1-476E-983A-54DF573C30F5"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_92304qc_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "C1B1A8F1-45B1-4E64-A254-7191FA93CB6D"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_9236c_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "DB2FFD26-8255-4351-8594-29D2AEFC06EF"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_9272q_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "61E10975-B47E-4F4D-8096-AEC7B7733612"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_93108tc-ex_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "2C67B7A6-9BB2-41FC-8FA3-8D0DF67CBC68"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_93120tx_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "182000E0-8204-4D8B-B7DE-B191AFE12E28"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_93128tx_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "BDC208BC-7E19-48C6-A20E-A79A51B7362C"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_93180lc-ex_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "084D0191-563B-4FF0-B589-F35DA118E1C6"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_93180yc-ex_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "968390BC-B430-4903-B614-13104BFAE635"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_9332pq_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "F7B90D36-5124-4669-8462-4EAF35B0F53D"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_9336pq_aci_spine_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "DEAAF99B-5406-4722-81FB-A91CBAC2DF41"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_9372px-e_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "737C724A-B6CD-4FF7-96E0-EBBF645D660E"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_9372px_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "7067AEC7-DFC8-4437-9338-C5165D9A8F36"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_9372tx-e_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "71D4CF15-B293-4403-A1A9-96AD3933BAEF"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_9372tx_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "DBCC1515-2DBE-4DF2-8E83-29A869170F36"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_9396px_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "7282AAFF-ED18-4992-AC12-D953C35EC328"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_9396tx_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "360409CC-4172-4878-A76B-EA1C1F8C7A79"
          },
          {
            "criteria": "cpe:2.3:h:cisco:nexus_9508_switch:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "B76FB64F-16F0-4B0B-B304-B46258D434BA"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Social media

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Configurations

References