CVE-2017-3857
First published: Wed Mar 22 2017(Updated: )
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through 3.18) could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of L2TP packets. An attacker could exploit this vulnerability by sending a crafted L2TP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS or Cisco IOS XE Software if the L2TP feature is enabled for the device and the device is configured as an L2TP Version 2 (L2TPv2) or L2TP Version 3 (L2TPv3) endpoint. By default, the L2TP feature is not enabled. Cisco Bug IDs: CSCuy82078.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS | >=12.0<=12.4 | |
| Cisco IOS | >=15.0<=15.6 | |
| Cisco IOS XE Web UI | >=3.1.0<=3.18.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-3857?
CVE-2017-3857 has a high severity rating as it allows remote attackers to cause a device to reload.
How do I fix CVE-2017-3857?
To fix CVE-2017-3857, update affected Cisco IOS or IOS XE software to a version that contains the necessary security patches.
Who is affected by CVE-2017-3857?
CVE-2017-3857 affects devices running Cisco IOS versions 12.0 to 12.4 and 15.0 to 15.6, as well as Cisco IOS XE versions 3.1 to 3.18.
What type of vulnerability is CVE-2017-3857?
CVE-2017-3857 is a remote code execution vulnerability related to Layer 2 Tunneling Protocol (L2TP) processing.
Can CVE-2017-3857 be exploited remotely?
Yes, CVE-2017-3857 can be exploited remotely by unauthenticated attackers.
- agent/weakness
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/event
- agent/author
- agent/severity
- agent/references
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios
- version/cisco ios/12.0
- version/cisco ios/12.4
- version/cisco ios/15.0
- version/cisco ios/15.6
- canonical/cisco ios xe web ui
- version/cisco ios xe web ui/3.1.0
- version/cisco ios xe web ui/3.18.0