Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed by an affected device. An exploit could allow the attacker to cause a buffer overflow condition or a reload of the affected device, leading to a DoS condition. Cisco IOS Software and Cisco IOS XE Software support EnergyWise for IPv4 communication. Only IPv4 packets destined to a device configured as an EnergyWise domain member can trigger these vulnerabilities. IPv6 packets cannot be used to trigger these vulnerabilities. Cisco Bug ID CSCut47751. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038313 - https://tools.cisco.c
CVE ID: CVE-2017-3862 State: PUBLISHED Published: 2017-04-20T22:00:00 Last Updated: 2024-08-05T14:39:41.097Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: CWE-119 Description: Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service (DoS) condition. These vulnerabilities are due to improper parsing of crafted EnergyWise packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed b
affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed by an affected device. An exploit could allow the attacker to cause a buffer overflow condition or a reload of the affected device, leading to a DoS condition. Cisco IOS Software and Cisco IOS XE Software support EnergyWise for IPv4 communication. Only IPv4 packets destined to a device configured as an EnergyWise domain member can trigger these vulnerabilities. IPv6 packets cannot be used to trigger these vulnerabilities. Cisco Bug ID CSCuu76493. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038313 - https://tools.cisco.c
CVE ID: CVE-2017-3863 State: PUBLISHED Published: 2017-04-20T22:00:00 Last Updated: 2024-08-05T14:39:41.346Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: CWE-119 Description: Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service (DoS) condition. These vulnerabilities are due to improper parsing of crafted EnergyWise packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed b
affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed by an affected device. An exploit could allow the attacker to cause a buffer overflow condition or a reload of the affected device, leading to a DoS condition. Cisco IOS Software and Cisco IOS XE Software support EnergyWise for IPv4 communication. Only IPv4 packets destined to a device configured as an EnergyWise domain member can trigger these vulnerabilities. IPv6 packets cannot be used to trigger these vulnerabilities. Cisco Bug ID CSCut50727. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038313 - https://tools.cisco.c
CVE ID: CVE-2017-3864 State: PUBLISHED Published: 2017-03-22T19:00:00 Last Updated: 2024-08-05T14:39:41.081Z Vendors: n/a Products: Cisco IOS and IOS XE Problem Types: CWE-399 Description: A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability occurs during the parsing of a crafted DHCP packet. An attacker could exploit this vulnerability by sending crafted DHCP packets to an affected device that is configured as a DHCP client. A successful exploit could allow the attacker to cause a reload of an affecte
evice that is configured as a DHCP client. A successful exploit could allow the attacker to cause a reload of an affected device, resulting in a DoS condition. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS or IOS XE Software and using a specific DHCP client configuration. Cisco Bug IDs: CSCuu43892. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97012 - http://www.securitytracker.com/id/1038103 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-dhcpc
CVE ID: CVE-2017-3865 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T14:39:41.076Z Vendors: n/a Products: Cisco StarOS for ASR 5000 Series Routers Problem Types: IPsec VPN Tunnel Denial of Service Vulnerability Description: A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from establishing, resulting in a denial of service (DoS) condition. Affected Products: ASR 5000 Series Routers, Virtualized Packet Core (VPC) Software. More Information: CSCvc21129. Known Affected Releases: 21.1.0 21.1.M0.65601 21.1.v0. Known Fix
cket Core (VPC) Software. More Information: CSCvc21129. Known Affected Releases: 21.1.0 21.1.M0.65601 21.1.v0. Known Fixed Releases: 21.2.A0.65754 21.1.b0.66164 21.1.V0.66014 21.1.R0.65759 21.1.M0.65749 21.1.0.66030 21.1.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99218 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-asr - http://www.securitytracker.com/id/1038748
CVE ID: CVE-2017-3866 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.275Z Vendors: n/a Products: Cisco Prime Service Catalog Problem Types: Multiple Cross-Site Scripting Vulnerabilities Description: A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvc79842 CSCvc79846 CSCvc79855 CSCvc79873 CSCvc79882 CSCvc79891. Known Affected Releases: 11.1.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96917 - http://www.s
. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96917 - http://www.securitytracker.com/id/1038045 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-psc
CVE ID: CVE-2017-3867 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.101Z Vendors: n/a Products: Cisco Adaptive Security Appliance Problem Types: ACL Bypass Vulnerability Description: A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to bypass the access control list (ACL) for specific TCP and UDP traffic. More Information: CSCvc68229. Known Affected Releases: 9.6(2). Known Fixed Releases: 99.1(20.1) 99.1(10.2) 98.1(12.7) 98.1(1.49) 97.1(6.58) 97.1(0.134) 96.2(0.109) 9.7(1.1) 9.6(2.99) 9.6(2.8). Addit
eases: 99.1(20.1) 99.1(10.2) 98.1(12.7) 98.1(1.49) 97.1(6.58) 97.1(0.134) 96.2(0.109) 9.7(1.1) 9.6(2.99) 9.6(2.8). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96926 - http://www.securitytracker.com/id/1038051 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-asa
CVE ID: CVE-2017-3868 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.084Z Vendors: n/a Products: Cisco UCS Director Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc44344. Known Affected Releases: 6.0(0.0). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96921 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisor
erences: - http://www.securityfocus.com/bid/96921 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucs - http://www.securitytracker.com/id/1038039
CVE ID: CVE-2017-3869 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.183Z Vendors: n/a Products: Cisco Prime Infrastructure Problem Types: Credentials Management Vulnerability Description: An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials. More Information: CSCuy36192. Known Affected Releases: 3.1(1) 3.1(1). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpi - htt
ntainer: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpi - http://www.securityfocus.com/bid/96931 - http://www.securitytracker.com/id/1038048
CVE ID: CVE-2017-3870 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.171Z Vendors: n/a Products: Cisco Web Security Appliance Problem Types: URL Filtering Bypass Vulnerability Description: A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass a configured URL filter rule. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA), both virtual and hardware appliances, that are configured with URL filters for email scanning. More Information: CSCvc69
both virtual and hardware appliances, that are configured with URL filters for email scanning. More Information: CSCvc69700. Known Affected Releases: 8.5.3-069 9.1.1-074 9.1.2-010. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wsa - http://www.securityfocus.com/bid/96907 - http://www.securitytracker.com/id/1038043
CVE ID: CVE-2017-3871 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.178Z Vendors: n/a Products: Cisco Prime Optical for Service Providers Problem Types: RADIUS Secret Disclosure Vulnerability Description: A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Providers could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker must have valid credentials for the device. More Information: CSCvc65257. Known Affected Releases: 10.6(0.1). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityf
nown Affected Releases: 10.6(0.1). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96928 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cpo
CVE ID: CVE-2017-3872 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.311Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: Cross-Site Scripting Vulnerability Description: A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known Affected Releases: 10.5(2.14076.1). Known Fixed Releases: 12.0(0.98000.641) 12.0(0.98000.500) 12.0(0.98000.219). Additional Analyst Notes: - CVE Program Container: References: - https://to
00.641) 12.0(0.98000.500) 12.0(0.98000.219). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm - http://www.securitytracker.com/id/1038036 - http://www.securityfocus.com/bid/96916
CVE ID: CVE-2017-3873 State: PUBLISHED Published: 2017-05-16T17:00:00 Last Updated: 2024-08-05T14:39:41.315Z Vendors: n/a Products: Cisco Aironet 1800, 2800, and 3800 Series Access Points Problem Types: CWE-20 Description: A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point (AP) or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges. The vulnerability is due to insufficient validation of PnP server responses. The PnP feature is only active while the device does not contain a configuration, such as a first time boot or after a f
The PnP feature is only active while the device does not contain a configuration, such as a first time boot or after a factory reset has been issued. An attacker with the ability to respond to PnP configuration requests from the affected device can exploit the vulnerability by returning malicious PnP responses. If a Cisco Application Policy Infrastructure Controller - Enterprise Module (APIC-EM) is available on the network, the attacker would need to exploit the issue in the short window before a valid PnP response was received. If successful, the attacker could gain the ability to execute arbitrary code with root privileges on the underlying operating system of the device. Cisco has confirm
ility to execute arbitrary code with root privileges on the underlying operating system of the device. Cisco has confirmed that the only vulnerable software version is 8.3.102.0. Cisco Bug IDs: CSCvb42386. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038394 - http://www.securityfocus.com/bid/98296 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-cme
CVE ID: CVE-2017-3874 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.320Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated, remote attacker to perform a cross-site scripting (XSS) attack. More Information: CSCvb70033. Known Affected Releases: 11.5(1.11007.2). Known Fixed Releases: 12.0(0.98000.507) 11.0(1.23900.5) 11.0(1.23900.3) 10.5(2.15900.2). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96914 - http://www.secur
ditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96914 - http://www.securitytracker.com/id/1038037 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm1
CVE ID: CVE-2017-3875 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.333Z Vendors: n/a Products: Cisco Nexus 7000 Series Switches Problem Types: Access-Control Filtering Mechanisms Bypass Vulnerability Description: An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexus 7000 Series Switches could allow an unauthenticated, remote attacker to bypass defined traffic configured within an access control list (ACL) on the affected system. More Information: CSCtz59354. Known Affected Releases: 5.2(4) 6.1(3)S5 6.1(3)S6 6.2(1.121)S0 7.2(1)D1(1) 7.3(0)ZN(0.161) 7.3(1)N1(0.1). Known Fixed Releases: 7.3(
ed Releases: 5.2(4) 6.1(3)S5 6.1(3)S6 6.2(1.121)S0 7.2(1)D1(1) 7.3(0)ZN(0.161) 7.3(1)N1(0.1). Known Fixed Releases: 7.3(0)D1(1) 6.2(2) 6.1(5) 8.3(0)KMT(0.24) 8.3(0)CV(0.337) 7.3(1)N1(1) 7.3(0)ZN(0.210) 7.3(0)ZN(0.177) 7.3(0)ZD(0.194) 7.3(0)TSH(0.99) 7.3(0)SC(0.14) 7.3(0)RSP(0.7) 7.3(0)N1(1) 7.3(0)N1(0.193) 7.3(0)IZN(0.13) 7.3(0)IB(0.102) 7.3(0)GLF(0.44) 7.3(0)D1(0.178) 7.1(0)D1(0.14) 7.0(3)ITI2(1.6) 7.0(3)ISH1(2.13) 7.0(3)IFD6(0.78) 7.0(3)IFD6(0) 7.0(3)IDE6(0.12) 7.0(3)IDE6(0) 7.0(3)I2(1) 7.0(3)I2(0.315) 7.0(1)ZD(0.3) 7.0(0)ZD(0.84) 6.2(1.149)S0 6.2(0.285) 6.1(5.32)S0 6.1(4.97)S0 6.1(2.30)S0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1
.97)S0 6.1(2.30)S0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038049 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-cns - http://www.securityfocus.com/bid/96930
CVE ID: CVE-2017-3876 State: PUBLISHED Published: 2017-05-16T17:00:00 Last Updated: 2024-08-05T14:39:41.338Z Vendors: n/a Products: Cisco IOS XR Problem Types: CWE-399 Description: A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this vulnerability by repeatedly sending unauthenticated gRPC requests to the affected device. A successful exploit could allow the attacker to crash the device in such a manner that manual intervention is required to recover.
l exploit could allow the attacker to crash the device in such a manner that manual intervention is required to recover. This vulnerability affects all Cisco IOS XR platforms that are running release 6.1.1 of Cisco IOS XR Software when the gRPC service is enabled on the device. The gRPC service is not enabled by default. Cisco Bug IDs: CSCvb14441. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98284 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ios-xr - http://www.securitytracker.com/id/1038393
CVE ID: CVE-2017-3877 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.383Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: Cross-Site Request Forgery Vulnerability Description: A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web interface of the affected software. More Information: CSCvb70021. Known Affected Releases: 11.5(1.11007.2). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/
yst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-ucm2 - http://www.securitytracker.com/id/1038038 - http://www.securityfocus.com/bid/96915
CVE ID: CVE-2017-3878 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.328Z Vendors: n/a Products: Cisco Nexus 9000 Series Switches Problem Types: Denial of Service Vulnerability Description: A Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a Telnet process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user traffic flowing through the device. Affected Products: This vulnerability affects Cisco Nexus 9000 Series Switches that are running Cisco NX-OS Software and ar
ected Products: This vulnerability affects Cisco Nexus 9000 Series Switches that are running Cisco NX-OS Software and are configured to allow remote Telnet connections to the device. More Information: CSCux46778. Known Affected Releases: 7.0(3)I3(0.170). Known Fixed Releases: 7.0(3)I3(1) 7.0(3)I3(0.257) 7.0(3)I3(0.255) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038047 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-nss - http://www.securityfocus.com/bid/96927
CVE ID: CVE-2017-3879 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.327Z Vendors: n/a Products: Cisco Nexus 9000 Series Switches Problem Types: Denial of Service Vulnerability Description: A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user traffic flowing through the device. The attacker could use either a Telnet or an SSH client for the remote login attempt. Affected Products: This vulnerability affects Cisc
ld use either a Telnet or an SSH client for the remote login attempt. Affected Products: This vulnerability affects Cisco Nexus 9000 Series Switches that are running Cisco NX-OS Software and are configured to allow remote Telnet connections to the device. More Information: CSCuy25824. Known Affected Releases: 7.0(3)I3(1) 8.3(0)CV(0.342) 8.3(0)CV(0.345). Known Fixed Releases: 8.3(0)CV(0.362) 8.0(1) 7.0(3)IED5(0.19) 7.0(3)IED5(0) 7.0(3)I4(1) 7.0(3)I4(0.8) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1) 7.0(3)F1(0.230). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-nss1 - http://www.securitytracke
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-nss1 - http://www.securitytracker.com/id/1038046 - http://www.securityfocus.com/bid/96920
CVE ID: CVE-2017-3880 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.095Z Vendors: n/a Products: Cisco WebEx Meetings Server Problem Types: Authentication Bypass Vulnerability Description: An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access limited meeting information on the Cisco WebEx Meetings Server. More Information: CSCvd50728. Known Affected Releases: 2.6 2.7 2.8 CWMS-2.5MR1 Orion1.1.2.patch T29_orion_merge. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-webex - http://www
References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-webex - http://www.securitytracker.com/id/1038040 - http://www.securityfocus.com/bid/96918
CVE ID: CVE-2017-3881 State: PUBLISHED Published: 2017-03-17T22:00:00.000Z Last Updated: 2025-10-21T23:55:43.556Z Vendors: n/a Products: Cisco IOS and IOS XE Software Problem Types: Remote Code Execution Vulnerability Description: A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: (1) the failure to restrict the