CVE-2017-3881

Cisco IOS and IOS XE Remote Code Execution Vulnerability

Ios

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: (1) the failure to restrict the use of…

17. Mär 2017

Ausgewertete Quellen

• Hersteller
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp
• Hinweis
  http://www.securityfocus.com/bid/96960
• Hinweis
  http://www.securityfocus.com/bid/97391
• Hinweis
  http://www.securitytracker.com/id/1038059
• Hinweis
  https://www.exploit-db.com/exploits/41872/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-3881
• CISA
  Cisco IOS and IOS XE Remote Code Execution Vulnerability
• NVD
  CVE-2017-3881