CVE-2017-3851: Path Traversal
A Directory Traversal vulnerability in the web framework code of the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an unauthenticated, remote attacker to read any file from the CAF in the virtual instance running on the affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting crafted requests to the CAF web interface. The impacts of a successful exploit are limited to the scope of the virtual instance and do not impact the router that is hosting Cisco IOx. Cisco IOx Releases 1.0.0.0 and 1.1.0.0 are vulnerable. Cisco Bug IDs: CSCuy52302.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cisco IOx application environment - Cisco application-hosting framework (CAF)to a version that resolves this vulnerability.Fixed in 1.0.0.0 - Upgrade
Upgrade
Cisco IOx application environment - Cisco application-hosting framework (CAF)to a version that resolves this vulnerability.Fixed in 1.1.0.0 - Compensating control
Since the issue is an input-validation flaw exploitable via crafted requests to the CAF web interface, restrict network access to the CAF web interface to trusted sources only (e.g., via firewall/ACL) to reduce exposure to unauthenticated remote attackers.
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3851?
CVE-2017-3851 is classified as a high severity vulnerability due to its potential to allow unauthorized file access.
How do I fix CVE-2017-3851?
To fix CVE-2017-3851, ensure that you update affected Cisco IOx software versions to the latest patched release.
What platforms are affected by CVE-2017-3851?
CVE-2017-3851 affects Cisco IOx version 1.1(0) and 1.1.0.
Can CVE-2017-3851 be exploited remotely?
Yes, CVE-2017-3851 can be exploited remotely by an unauthenticated attacker.
What types of attacks can be conducted using CVE-2017-3851?
Using CVE-2017-3851, an attacker can perform directory traversal attacks to read any file on the server.