VulnerabilityModified

CVE-2017-3861

HIGH 8.6EPSS 2.78%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.78%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service (DoS) condition. These vulnerabilities are due to improper parsing of crafted EnergyWise packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed by an affected device. An exploit could allow the attacker to cause a buffer overflow condition or a reload of the affected device, leading to a DoS condition. Cisco IOS Software and Cisco IOS XE Software support EnergyWise for IPv4 communication. Only IPv4 packets destined to a device configured as an EnergyWise domain member can trigger these vulnerabilities. IPv6 packets cannot be used to trigger these vulnerabilities. Cisco Bug ID CSCut47751.

CVSS 3.0: 8.6 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
EPSS: 2.78% probability · 86th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: cisco/ios · cisco/ios xe
Source: psirt@cisco.com

References

http://www.securityfocus.com/bid/97935Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038313
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywiseVendor Advisory
http://www.securityfocus.com/bid/97935Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038313
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywiseVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.