CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-03-17
Cisco IOS and IOS XE Cluster Management Protocol (CMP) Remote Code Execution and Denial of Service Vulnerability (CVE-2017-3881)
[Affected Scope] Cisco IOS and IOS XE-based Catalyst switches and embedded service modules configured to accept Telnet connections and utilizing CMP
[Impact] Unauthenticated, remote attackers can execute arbitrary code with elevated privileges or cause a device reload by sending malformed CMP-specific Telnet options
[Mitigation] Apply official Cisco software updates immediately, or disable Telnet services and restrict VTY access using infrastructure ACLs