Cisco IOS and IOS XE Software Multiple Denial of Service Vulnerabilities

Cisco IOS and IOS XE Software are prone to multiple remote denial-of-service vulnerabilities.

An attacker can exploit these issues to cause an affected device to reload, denying service to legitimate users.

These issues are being tracked by Cisco Bug IDs CSCur29331, CSCut47751, CSCut50727 and CSCuu76493.

Information

Bugtraq ID: 97935
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2017-3860
CVE-2017-3861
CVE-2017-3862
CVE-2017-3863

Remote: Yes
Local: No
Published: Apr 19 2017 12:00AM
Updated: Apr 19 2017 12:00AM
Credit: Cisco
Vulnerable: Cisco IOS XE Software 0
Cisco IOS 12.2(55)SE1
Cisco Industrial Ethernet 3000 Series Switches 15.2(3.2.17)E1
Cisco Industrial Ethernet 3000 Series Switches 15.2(3.2.16)E1
Cisco Catalyst 3850 Series Switches 15.5(3)
Cisco Catalyst 3850 Series Switches 15.2(3.7.1)
Cisco Catalyst 3750-X Series Switches 15.5(3)

Not Vulnerable: Cisco Ios 3.7(1)E
Cisco Ios 16.2(0.31)
Cisco Ios 16.1(0.339)
Cisco Ios 15.2(5.6.2)E
Cisco Ios 15.2(5.5.64)E
Cisco Ios 15.2(5.5.54)E
Cisco Ios 15.2(5.5.52)E
Cisco Ios 15.2(5.1.1)E
Cisco Ios 15.2(5.0)ST
Cisco Ios 15.2(4.0.64a)E
Cisco Ios 15.2(4.0)ST
Cisco Ios 15.2(3)E1
Cisco Ios 15.2(2)E6
Cisco Ios 15.0(2a)EX5
Cisco Industrial Ethernet 3000 Series Switches 3.7(1)E
Cisco Industrial Ethernet 3000 Series Switches 16.2(0.31)
Cisco Industrial Ethernet 3000 Series Switches 16.1(0.339)
Cisco Industrial Ethernet 3000 Series Switches 15.2(5.6.2)E
Cisco Industrial Ethernet 3000 Series Switches 15.2(5.5.64)E
Cisco Industrial Ethernet 3000 Series Switches 15.2(5.5.54)E
Cisco Industrial Ethernet 3000 Series Switches 15.2(5.5.52)E
Cisco Industrial Ethernet 3000 Series Switches 15.2(5.1.1)E
Cisco Industrial Ethernet 3000 Series Switches 15.2(5.0)ST
Cisco Industrial Ethernet 3000 Series Switches 15.2(4.0.64a)E
Cisco Industrial Ethernet 3000 Series Switches 15.2(4.0)ST
Cisco Industrial Ethernet 3000 Series Switches 15.2(3)E2
Cisco Industrial Ethernet 3000 Series Switches 15.2(3)E1
Cisco Industrial Ethernet 3000 Series Switches 15.2(2)E6
Cisco Catalyst 3850 Series Switches Denali-11.3.1
Cisco Catalyst 3850 Series Switches 3.8(0)E
Cisco Catalyst 3850 Series Switches 16.3(0.71)
Cisco Catalyst 3850 Series Switches 16.2(2.36)
Cisco Catalyst 3850 Series Switches 16.2(2.25)
Cisco Catalyst 3850 Series Switches 16.2(0.16)
Cisco Catalyst 3850 Series Switches 16.1(0.339)
Cisco Catalyst 3850 Series Switches 15.2(5.6.2)E
Cisco Catalyst 3850 Series Switches 15.2(5.5.64)E
Cisco Catalyst 3850 Series Switches 15.2(5.5.54)E
Cisco Catalyst 3850 Series Switches 15.2(5.5.52)E
Cisco Catalyst 3850 Series Switches 15.2(5.1.1)E
Cisco Catalyst 3850 Series Switches 15.2(5.0)ST
Cisco Catalyst 3850 Series Switches 15.2(4.0.64a)E
Cisco Catalyst 3850 Series Switches 15.2(4.0.15)E
Cisco Catalyst 3850 Series Switches 15.2(4.0)ST
Cisco Catalyst 3850 Series Switches 15.2(4)E
Cisco Catalyst 3850 Series Switches 15.2(3)E2
Cisco Catalyst 3850 Series Switches 15.2(2)E6
Cisco Catalyst 3850 Series Switches 11.3(1)
Cisco Catalyst 3750-X Series Switches Denali-11.3.1
Cisco Catalyst 3750-X Series Switches 3.7(4)E
Cisco Catalyst 3750-X Series Switches 16.3(0.71)
Cisco Catalyst 3750-X Series Switches 16.2(2.36)
Cisco Catalyst 3750-X Series Switches 16.2(2.25)
Cisco Catalyst 3750-X Series Switches 15.2(5.6.1)E
Cisco Catalyst 3750-X Series Switches 15.2(5.5.36)E
Cisco Catalyst 3750-X Series Switches 15.2(5.0.34)E
Cisco Catalyst 3750-X Series Switches 15.2(4.2.1)EA2
Cisco Catalyst 3750-X Series Switches 15.2(4.1.5a)E
Cisco Catalyst 3750-X Series Switches 15.2(4.1.25)EA1
Cisco Catalyst 3750-X Series Switches 15.2(4.0.95a)E
Cisco Catalyst 3750-X Series Switches 15.2(4.0.95)EA1
Cisco Catalyst 3750-X Series Switches 15.2(4)EA5
Cisco Catalyst 3750-X Series Switches 15.2(4)EA1
Cisco Catalyst 3750-X Series Switches 15.2(4)E3
Cisco Catalyst 3750-X Series Switches 15.2(4)E2
Cisco Catalyst 3750-X Series Switches 15.2(4)E1
Cisco Catalyst 3750-X Series Switches 15.2(3)E4
Cisco Catalyst 3750-X Series Switches 15.2(2)E6
Cisco Catalyst 3750-X Series Switches 11.3(1)

Exploit

To exploit these issues attackers can use readily available tools.

References:

• Cisco IOS Software (Cisco Systems)
  
• Cisco IOS and IOS XE Software EnergyWise Denial of Service Vulnerabilities (Cisco)
  

Source: www.securityfocus.com