8.6
CWE
119
Advisory Published
Updated

CVE-2017-3863: Buffer Overflow

First published: Thu Apr 20 2017(Updated: )

Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service (DoS) condition. These vulnerabilities are due to improper parsing of crafted EnergyWise packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed by an affected device. An exploit could allow the attacker to cause a buffer overflow condition or a reload of the affected device, leading to a DoS condition. Cisco IOS Software and Cisco IOS XE Software support EnergyWise for IPv4 communication. Only IPv4 packets destined to a device configured as an EnergyWise domain member can trigger these vulnerabilities. IPv6 packets cannot be used to trigger these vulnerabilities. Cisco Bug ID CSCut50727.

Credit: ykramarz@cisco.com

Affected SoftwareAffected VersionHow to fix
Cisco IOS=12.2\(33\)sxi4
Cisco IOS=12.2\(33\)sxi4a
Cisco IOS=12.2\(33\)sxi5
Cisco IOS=12.2\(33\)sxi6
Cisco IOS=12.2\(33\)sxi7
Cisco IOS=12.2\(33\)sxi8
Cisco IOS=12.2\(33\)sxi8a
Cisco IOS=12.2\(33\)sxi9
Cisco IOS=12.2\(33\)sxi10
Cisco IOS=12.2\(33\)sxi11
Cisco IOS=12.2\(33\)sxi12
Cisco IOS=12.2\(33\)sxi13
Cisco IOS=12.2\(33\)sxi14
Cisco IOS=12.2\(33\)sxj
Cisco IOS=12.2\(33\)sxj1
Cisco IOS=12.2\(33\)sxj2
Cisco IOS=12.2\(33\)sxj3
Cisco IOS=12.2\(33\)sxj4
Cisco IOS=12.2\(33\)sxj5
Cisco IOS=12.2\(33\)sxj6
Cisco IOS=12.2\(33\)sxj7
Cisco IOS=12.2\(33\)sxj8
Cisco IOS=12.2\(33\)sxj9
Cisco IOS=12.2\(33\)sxj10
Cisco IOS=12.2\(52\)ex
Cisco IOS=12.2\(52\)ex1
Cisco IOS=12.2\(52\)ey
Cisco IOS=12.2\(52\)ey1
Cisco IOS=12.2\(52\)ey1b
Cisco IOS=12.2\(52\)ey1c
Cisco IOS=12.2\(52\)ey2
Cisco IOS=12.2\(52\)ey2a
Cisco IOS=12.2\(52\)ey3
Cisco IOS=12.2\(52\)ey3a
Cisco IOS=12.2\(52\)ey4
Cisco IOS=12.2\(53\)ex
Cisco IOS=12.2\(53\)ey
Cisco IOS=12.2\(53\)ez
Cisco IOS=12.2\(53\)se
Cisco IOS=12.2\(53\)se1
Cisco IOS=12.2\(53\)se2
Cisco IOS=12.2\(54\)se
Cisco IOS=12.2\(54\)sg
Cisco IOS=12.2\(54\)sg1
Cisco IOS=12.2\(54\)wo
Cisco IOS=12.2\(54\)xo
Cisco IOS=12.2\(55\)ex
Cisco IOS=12.2\(55\)ex1
Cisco IOS=12.2\(55\)ex2
Cisco IOS=12.2\(55\)ex3
Cisco IOS=12.2\(55\)ey
Cisco IOS=12.2\(55\)ez
Cisco IOS=12.2\(55\)se
Cisco IOS=12.2\(55\)se1
Cisco IOS=12.2\(55\)se2
Cisco IOS=12.2\(55\)se3
Cisco IOS=12.2\(55\)se4
Cisco IOS=12.2\(55\)se5
Cisco IOS=12.2\(55\)se6
Cisco IOS=12.2\(55\)se7
Cisco IOS=12.2\(55\)se8
Cisco IOS=12.2\(55\)se9
Cisco IOS=12.2\(55\)se10
Cisco IOS=12.2\(55\)se11
Cisco IOS=12.2\(58\)ey
Cisco IOS=12.2\(58\)ey1
Cisco IOS=12.2\(58\)ey2
Cisco IOS=12.2\(58\)se
Cisco IOS=12.2\(58\)se1
Cisco IOS=12.2\(58\)se2
Cisco IOS=12.2\(60\)ez
Cisco IOS=12.2\(60\)ez1
Cisco IOS=12.2\(60\)ez2
Cisco IOS=12.2\(60\)ez3
Cisco IOS=12.2\(60\)ez4
Cisco IOS=12.2\(60\)ez5
Cisco IOS=12.2\(60\)ez6
Cisco IOS=12.2\(60\)ez7
Cisco IOS=12.2\(60\)ez8
Cisco IOS=12.2\(60\)ez9
Cisco IOS=15.0\(1\)m2
Cisco IOS=15.0\(1\)m3
Cisco IOS=15.0\(1\)m4
Cisco IOS=15.0\(1\)m5
Cisco IOS=15.0\(1\)m6
Cisco IOS=15.0\(1\)m7
Cisco IOS=15.0\(1\)m8
Cisco IOS=15.0\(1\)m9
Cisco IOS=15.0\(1\)m10
Cisco IOS=15.0\(1\)se
Cisco IOS=15.0\(1\)se1
Cisco IOS=15.0\(1\)se2
Cisco IOS=15.0\(1\)se3
Cisco IOS=15.0\(1\)sy1
Cisco IOS=15.0\(1\)sy2
Cisco IOS=15.0\(1\)sy3
Cisco IOS=15.0\(1\)sy4
Cisco IOS=15.0\(1\)sy5
Cisco IOS=15.0\(1\)sy6
Cisco IOS=15.0\(1\)sy7
Cisco IOS=15.0\(1\)sy7a
Cisco IOS=15.0\(1\)sy8
Cisco IOS=15.0\(1\)sy9
Cisco IOS=15.0\(1\)sy10
Cisco IOS=15.0\(1\)xo
Cisco IOS=15.0\(1\)xo1
Cisco IOS=15.0\(2\)ed
Cisco IOS=15.0\(2\)ed1
Cisco IOS=15.0\(2\)eh
Cisco IOS=15.0\(2\)ej
Cisco IOS=15.0\(2\)ej1
Cisco IOS=15.0\(2\)ek
Cisco IOS=15.0\(2\)ek1
Cisco IOS=15.0\(2\)ex
Cisco IOS=15.0\(2\)ex1
Cisco IOS=15.0\(2\)ex2
Cisco IOS=15.0\(2\)ex3
Cisco IOS=15.0\(2\)ex4
Cisco IOS=15.0\(2\)ex5
Cisco IOS=15.0\(2\)ex8
Cisco IOS=15.0\(2\)ex10
Cisco IOS=15.0\(2\)ez
Cisco IOS=15.0\(2\)se
Cisco IOS=15.0\(2\)se1
Cisco IOS=15.0\(2\)se2
Cisco IOS=15.0\(2\)se3
Cisco IOS=15.0\(2\)se4
Cisco IOS=15.0\(2\)se5
Cisco IOS=15.0\(2\)se6
Cisco IOS=15.0\(2\)se7
Cisco IOS=15.0\(2\)se9
Cisco IOS=15.0\(2\)se10
Cisco IOS=15.0\(2\)sg
Cisco IOS=15.0\(2\)sg1
Cisco IOS=15.0\(2\)sg2
Cisco IOS=15.0\(2\)sg3
Cisco IOS=15.0\(2\)sg4
Cisco IOS=15.0\(2\)sg5
Cisco IOS=15.0\(2\)sg6
Cisco IOS=15.0\(2\)sg7
Cisco IOS=15.0\(2\)sg8
Cisco IOS=15.0\(2\)xo
Cisco IOS=15.0\(2a\)ex5
Cisco IOS=15.0\(2a\)se9
Cisco IOS=15.1\(1\)sg
Cisco IOS=15.1\(1\)sg1
Cisco IOS=15.1\(1\)sg2
Cisco IOS=15.1\(1\)sy
Cisco IOS=15.1\(1\)sy2
Cisco IOS=15.1\(1\)sy3
Cisco IOS=15.1\(1\)sy4
Cisco IOS=15.1\(1\)sy5
Cisco IOS=15.1\(1\)sy6
Cisco IOS=15.1\(1\)t
Cisco IOS=15.1\(1\)t1
Cisco IOS=15.1\(1\)t2
Cisco IOS=15.1\(1\)t3
Cisco IOS=15.1\(1\)t4
Cisco IOS=15.1\(1\)t5
Cisco IOS=15.1\(2\)gc
Cisco IOS=15.1\(2\)gc1
Cisco IOS=15.1\(2\)gc2
Cisco IOS=15.1\(2\)sg
Cisco IOS=15.1\(2\)sg1
Cisco IOS=15.1\(2\)sg2
Cisco IOS=15.1\(2\)sg3
Cisco IOS=15.1\(2\)sg4
Cisco IOS=15.1\(2\)sg5
Cisco IOS=15.1\(2\)sg6
Cisco IOS=15.1\(2\)sg7
Cisco IOS=15.1\(2\)sg8
Cisco IOS=15.1\(2\)sy
Cisco IOS=15.1\(2\)sy1
Cisco IOS=15.1\(2\)sy2
Cisco IOS=15.1\(2\)sy3
Cisco IOS=15.1\(2\)sy4
Cisco IOS=15.1\(2\)sy4a
Cisco IOS=15.1\(2\)sy5
Cisco IOS=15.1\(2\)sy6
Cisco IOS=15.1\(2\)sy7
Cisco IOS=15.1\(2\)sy8
Cisco IOS=15.1\(2\)sy10
Cisco IOS=15.1\(2\)t
Cisco IOS=15.1\(2\)t0a
Cisco IOS=15.1\(2\)t1
Cisco IOS=15.1\(2\)t2
Cisco IOS=15.1\(2\)t2a
Cisco IOS=15.1\(2\)t3
Cisco IOS=15.1\(2\)t4
Cisco IOS=15.1\(2\)t5
Cisco IOS=15.1\(3\)t
Cisco IOS=15.1\(3\)t1
Cisco IOS=15.1\(3\)t2
Cisco IOS=15.1\(3\)t3
Cisco IOS=15.1\(3\)t4
Cisco IOS=15.1\(4\)gc
Cisco IOS=15.1\(4\)gc1
Cisco IOS=15.1\(4\)gc2
Cisco IOS=15.1\(4\)m
Cisco IOS=15.1\(4\)m1
Cisco IOS=15.1\(4\)m2
Cisco IOS=15.1\(4\)m3
Cisco IOS=15.1\(4\)m3a
Cisco IOS=15.1\(4\)m4
Cisco IOS=15.1\(4\)m5
Cisco IOS=15.1\(4\)m6
Cisco IOS=15.1\(4\)m7
Cisco IOS=15.1\(4\)m8
Cisco IOS=15.1\(4\)m9
Cisco IOS=15.1\(4\)m10
Cisco IOS=15.2\(1\)e
Cisco IOS=15.2\(1\)e1
Cisco IOS=15.2\(1\)e2
Cisco IOS=15.2\(1\)e3
Cisco IOS=15.2\(1\)gc
Cisco IOS=15.2\(1\)gc1
Cisco IOS=15.2\(1\)gc2
Cisco IOS=15.2\(1\)sy
Cisco IOS=15.2\(1\)sy0a
Cisco IOS=15.2\(1\)sy1
Cisco IOS=15.2\(1\)sy1a
Cisco IOS=15.2\(1\)sy2
Cisco IOS=15.2\(1\)sy3
Cisco IOS=15.2\(1\)t
Cisco IOS=15.2\(1\)t1
Cisco IOS=15.2\(1\)t2
Cisco IOS=15.2\(1\)t3
Cisco IOS=15.2\(1\)t3a
Cisco IOS=15.2\(1\)t4
Cisco IOS=15.2\(2\)e
Cisco IOS=15.2\(2\)e1
Cisco IOS=15.2\(2\)e2
Cisco IOS=15.2\(2\)e4
Cisco IOS=15.2\(2\)e5
Cisco IOS=15.2\(2\)e5a
Cisco IOS=15.2\(2\)eb
Cisco IOS=15.2\(2\)eb1
Cisco IOS=15.2\(2\)eb2
Cisco IOS=15.2\(2\)gc
Cisco IOS=15.2\(2\)sy
Cisco IOS=15.2\(2\)sy1
Cisco IOS=15.2\(2\)sy2
Cisco IOS=15.2\(2\)t
Cisco IOS=15.2\(2\)t1
Cisco IOS=15.2\(2\)t2
Cisco IOS=15.2\(2\)t3
Cisco IOS=15.2\(2\)t4
Cisco IOS=15.2\(2a\)e1
Cisco IOS=15.2\(3\)e
Cisco IOS=15.2\(3\)e1
Cisco IOS=15.2\(3\)e2
Cisco IOS=15.2\(3\)e3
Cisco IOS=15.2\(3\)gc
Cisco IOS=15.2\(3\)gc1
Cisco IOS=15.2\(3\)t
Cisco IOS=15.2\(3\)t1
Cisco IOS=15.2\(3\)t2
Cisco IOS=15.2\(3\)t3
Cisco IOS=15.2\(3\)t4
Cisco IOS=15.2\(3a\)e
Cisco IOS=15.2\(3m\)e2
Cisco IOS=15.2\(4\)e
Cisco IOS=15.2\(4\)gc
Cisco IOS=15.2\(4\)gc1
Cisco IOS=15.2\(4\)gc2
Cisco IOS=15.2\(4\)gc3
Cisco IOS=15.2\(4\)m
Cisco IOS=15.2\(4\)m1
Cisco IOS=15.2\(4\)m2
Cisco IOS=15.2\(4\)m3
Cisco IOS=15.2\(4\)m4
Cisco IOS=15.2\(4\)m5
Cisco IOS=15.2\(4\)m6
Cisco IOS=15.2\(4\)m6a
Cisco IOS=15.2\(4\)m7
Cisco IOS=15.2\(4\)m8
Cisco IOS=15.2\(4\)m9
Cisco IOS=15.2\(4\)m10
Cisco IOS=15.2\(4\)m11
Cisco IOS=15.3\(1\)sy
Cisco IOS=15.3\(1\)sy2
Cisco IOS=15.3\(1\)t
Cisco IOS=15.3\(1\)t1
Cisco IOS=15.3\(1\)t2
Cisco IOS=15.3\(1\)t3
Cisco IOS=15.3\(1\)t4
Cisco IOS=15.3\(2\)t
Cisco IOS=15.3\(2\)t1
Cisco IOS=15.3\(2\)t2
Cisco IOS=15.3\(2\)t3
Cisco IOS=15.3\(2\)t4
Cisco IOS=15.3\(3\)m
Cisco IOS=15.3\(3\)m1
Cisco IOS=15.3\(3\)m2
Cisco IOS=15.3\(3\)m3
Cisco IOS=15.3\(3\)m4
Cisco IOS=15.3\(3\)m5
Cisco IOS=15.3\(3\)m6
Cisco IOS=15.3\(3\)m7
Cisco IOS=15.3\(3\)m9
Cisco IOS=15.4\(1\)cg
Cisco IOS=15.4\(1\)cg1
Cisco IOS=15.4\(1\)sy
Cisco IOS=15.4\(1\)sy1
Cisco IOS=15.4\(1\)t
Cisco IOS=15.4\(1\)t1
Cisco IOS=15.4\(1\)t2
Cisco IOS=15.4\(1\)t3
Cisco IOS=15.4\(1\)t4
Cisco IOS=15.4\(2\)cg
Cisco IOS=15.4\(2\)t
Cisco IOS=15.4\(2\)t1
Cisco IOS=15.4\(2\)t2
Cisco IOS=15.4\(2\)t3
Cisco IOS=15.4\(2\)t4
Cisco IOS=15.4\(3\)m
Cisco IOS=15.4\(3\)m1
Cisco IOS=15.4\(3\)m2
Cisco IOS=15.4\(3\)m3
Cisco IOS=15.4\(3\)m4
Cisco IOS=15.4\(3\)m5
Cisco IOS=15.4\(3\)m6
Cisco IOS=15.4\(3\)m6a
Cisco IOS=15.4\(3\)m7
Cisco IOS=15.5\(1\)t
Cisco IOS=15.5\(1\)t1
Cisco IOS=15.5\(1\)t2
Cisco IOS=15.5\(1\)t3
Cisco IOS=15.5\(2\)t
Cisco IOS=15.5\(2\)t1
Cisco IOS=15.5\(2\)t2
Cisco IOS=15.5\(2\)t3
Cisco IOS=15.5\(2\)t4
Cisco IOS=15.5\(3\)m0a
Cisco IOS=15.5\(3\)m1
Cisco IOS=15.5\(3\)m2
Cisco IOS=15.5\(3\)m4
Cisco IOS=15.5\(3\)m4a
Cisco IOS=15.5\(3\)m5
Cisco IOS=15.5\(3\)s5
Cisco IOS=15.6\(1\)t
Cisco IOS=15.6\(1\)t0a
Cisco IOS=15.6\(1\)t1
Cisco IOS=15.6\(1\)t2
Cisco IOS=15.6\(2\)t
Cisco IOS=15.6\(2\)t1
Cisco IOS=15.6\(2\)t2
Cisco IOS=15.6\(3\)m
Cisco IOS=15.6\(3\)m0a
Cisco IOS=15.6\(3\)m1
Cisco IOS=15.6\(3\)m1b
Cisco IOS=15.6\(3\)m2
Cisco IOS XE Software=3.2.1sg
Cisco IOS XE Software=3.2.8sg
Cisco IOS XE Software=3.3.1sg
Cisco IOS XE Software=3.3.1sq
Cisco IOS XE Software=3.4.1sg
Cisco IOS XE Software=3.4.2sg
Cisco IOS XE Software=3.4.3sg
Cisco IOS XE Software=3.4.6sg
Cisco IOS XE Software=3.4.8sg
Cisco IOS XE Software=3.5.1e
Cisco IOS XE Software=3.5.3e
Cisco IOS XE Software=3.6.0e
Cisco IOS XE Software=3.6.1e
Cisco IOS XE Software=3.6.2ae
Cisco IOS XE Software=3.6.2e
Cisco IOS XE Software=3.6.4e
Cisco IOS XE Software=3.6.5ae
Cisco IOS XE Software=3.6.5e
Cisco IOS XE Software=3.7.0e
Cisco IOS XE Software=3.7.1e
Cisco IOS XE Software=3.7.2e
Cisco IOS XE Software=3.7.3e
Cisco IOS XE Software=3.8.0e
Cisco IOS XE Software=3.18.1sp

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2017-3863?

    CVE-2017-3863 has a CVSS score indicating a high severity level that may cause a denial of service.

  • How do I fix CVE-2017-3863?

    To fix CVE-2017-3863, update the affected Cisco IOS or IOS XE software to a version that includes the security patch.

  • Which devices are affected by CVE-2017-3863?

    CVE-2017-3863 affects multiple versions of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18).

  • What kind of attack can exploit CVE-2017-3863?

    An unauthenticated remote attacker can exploit CVE-2017-3863 to cause a buffer overflow or a device reload.

  • What are the potential impacts of CVE-2017-3863?

    Exploitation of CVE-2017-3863 can lead to a denial of service condition on affected devices.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203