CVE-2017-3820: Medium severity Cisco IOS XE vulnerability
A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S, or 3.17.1S could allow an authenticated, remote attacker to cause high CPU usage on an affected device, resulting in a denial of service (DoS) condition. More Information: CSCux68796. Known Affected Releases: 15.5(3)S2.1 15.6(1)S1.1. Known Fixed Releases: 15.4(3)S6.1 15.4(3)S6.2 15.5(3)S2.2 15.5(3)S3 15.6(0.22)S0.23 15.6(1)S2 16.2(0.295) 16.3(0.94) 15.5.3S3.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cisco ASR 1000 Series Aggregation Services Routers (Cisco IOS XE)to a version that resolves this vulnerability.Fixed in 15.4(3)S6.1 - Upgrade
Upgrade
Cisco ASR 1000 Series Aggregation Services Routers (Cisco IOS XE)to a version that resolves this vulnerability.Fixed in 15.4(3)S6.2 - Upgrade
Upgrade
Cisco ASR 1000 Series Aggregation Services Routers (Cisco IOS XE)to a version that resolves this vulnerability.Fixed in 15.5(3)S2.2 - Upgrade
Upgrade
Cisco ASR 1000 Series Aggregation Services Routers (Cisco IOS XE)to a version that resolves this vulnerability.Fixed in 15.5(3)S3 - Upgrade
Upgrade
Cisco ASR 1000 Series Aggregation Services Routers (Cisco IOS XE)to a version that resolves this vulnerability.Fixed in 15.6(0.22)S0.23 - Upgrade
Upgrade
Cisco ASR 1000 Series Aggregation Services Routers (Cisco IOS XE)to a version that resolves this vulnerability.Fixed in 15.6(1)S2 - Upgrade
Upgrade
Cisco ASR 1000 Series Aggregation Services Routers (Cisco IOS XE)to a version that resolves this vulnerability.Fixed in 16.2(0.295) - Upgrade
Upgrade
Cisco ASR 1000 Series Aggregation Services Routers (Cisco IOS XE)to a version that resolves this vulnerability.Fixed in 16.3(0.94) - Upgrade
Upgrade
Cisco ASR 1000 Series Aggregation Services Routers (Cisco IOS XE)to a version that resolves this vulnerability.Fixed in 15.5.3S3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch CSCux68796
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3820?
CVE-2017-3820 is considered a medium severity vulnerability due to its potential to cause high CPU usage on affected devices.
How do I fix CVE-2017-3820?
To fix CVE-2017-3820, upgrade to a patched version of Cisco IOS XE that addresses this vulnerability.
Who is affected by CVE-2017-3820?
CVE-2017-3820 affects Cisco ASR 1000 Series Aggregation Services Routers running specific versions of Cisco IOS XE Software.
What type of attack is associated with CVE-2017-3820?
CVE-2017-3820 could allow an authenticated remote attacker to exploit SNMP functions and cause high CPU utilization.
Is CVE-2017-3820 remotely exploitable?
Yes, CVE-2017-3820 is remotely exploitable, but the attacker must be authenticated to exploit this vulnerability.