CVE-2017-3879
5.3
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: NVD
Description
A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user traffic flowing through the device. The attacker could use either a Telnet or an SSH client for the remote login attempt. Affected Products: This vulnerability affects Cisco Nexus 9000 Series Switches that are running Cisco NX-OS Software and are configured to allow remote Telnet connections to the device. More Information: CSCuy25824. Known Affected Releases: 7.0(3)I3(1) 8.3(0)CV(0.342) 8.3(0)CV(0.345). Known Fixed Releases: 8.3(0)CV(0.362) 8.0(1) 7.0(3)IED5(0.19) 7.0(3)IED5(0) 7.0(3)I4(1) 7.0(3)I4(0.8) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1) 7.0(3)F1(0.230).
Affected (3)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 7.0(3)i3(0.170) |
| Running on/with | Platform Versions |
|---|---|
Cisco Nexus 92160yc Switch | All versions |
Cisco Nexus 92300yc Switch | All versions |
Cisco Nexus 92304qc Switch | All versions |
Cisco Nexus 9236c Switch | All versions |
Cisco Nexus 9272q Switch | All versions |
Cisco Nexus 93108tc Ex Switch | All versions |
Cisco Nexus 93120tx Switch | All versions |
Cisco Nexus 93128tx Switch | All versions |
Cisco Nexus 93180lc Ex Switch | All versions |
Cisco Nexus 93180yc Ex Switch | All versions |
Cisco Nexus 9332pq Switch | All versions |
Cisco Nexus 9336pq Aci Spine Switch | All versions |
Cisco Nexus 9372px E Switch | All versions |
Cisco Nexus 9372px Switch | All versions |
Cisco Nexus 9372tx E Switch | All versions |
Cisco Nexus 9372tx Switch | All versions |
Cisco Nexus 9396px Switch | All versions |
Cisco Nexus 9396tx Switch | All versions |
Cisco Nexus 9508 Switch | All versions |
References (6)
Source: psirt@cisco.com
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.