CVE-2017-3879 — MEDIUM (5.3)

Vulnerability Description

A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user traffic flowing through the device. The attacker could use either a Telnet or an SSH client for the remote login attempt. Affected Products: This vulnerability affects Cisco Nexus 9000 Series Switches that are running Cisco NX-OS Software and are configured to allow remote Telnet connections to the device. More Information: CSCuy25824. Known Affected Releases: 7.0(3)I3(1) 8.3(0)CV(0.342) 8.3(0)CV(0.345). Known Fixed Releases: 8.3(0)CV(0.362) 8.0(1) 7.0(3)IED5(0.19) 7.0(3)IED5(0) 7.0(3)I4(1) 7.0(3)I4(0.8) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1) 7.0(3)F1(0.230).

CVSS Score

5.3

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

LOW

Affected Products

Vendor	Product	Versions
Cisco	Nx-Os	7.0\(3\)i3\(0.170\)
Cisco	Nexus 92160Yc Switch	-
Cisco	Nexus 92300Yc Switch	-
Cisco	Nexus 92304Qc Switch	-
Cisco	Nexus 9236C Switch	-
Cisco	Nexus 9272Q Switch	-
Cisco	Nexus 93108Tc-Ex Switch	-
Cisco	Nexus 93120Tx Switch	-
Cisco	Nexus 93128Tx Switch	-
Cisco	Nexus 93180Lc-Ex Switch	-
Cisco	Nexus 93180Yc-Ex Switch	-
Cisco	Nexus 9332Pq Switch	-
Cisco	Nexus 9336Pq Aci Spine Switch	-
Cisco	Nexus 9372Px-E Switch	-
Cisco	Nexus 9372Px Switch	-
Cisco	Nexus 9372Tx-E Switch	-
Cisco	Nexus 9372Tx Switch	-
Cisco	Nexus 9396Px Switch	-
Cisco	Nexus 9396Tx Switch	-
Cisco	Nexus 9508 Switch	-

Related Weaknesses (CWE)

CWE-119

References

http://www.securityfocus.com/bid/96920Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038046
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2Vendor Advisory
http://www.securityfocus.com/bid/96920Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038046
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2Vendor Advisory

FAQ

What is CVE-2017-3879?

CVE-2017-3879 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a proc...

How severe is CVE-2017-3879?

CVE-2017-3879 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-3879?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Nx-Os, Cisco Nexus 92160Yc Switch, Cisco Nexus 92300Yc Switch, Cisco Nexus 92304Qc Switch, Cisco Nexus 9236C Switch.