CVEvulnerability
CVE-2017-3820
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-02-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:C
- Weaknesses
- CWE-665
Description
A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S, or 3.17.1S could allow an authenticated, remote attacker to cause high CPU usage on an affected device, resulting in a denial of service (DoS) condition. More Information: CSCux68796. Known Affected Releases: 15.5(3)S2.1 15.6(1)S1.1. Known Fixed Releases: 15.4(3)S6.1 15.4(3)S6.2 15.5(3)S2.2 15.5(3)S3 15.6(0.22)S0.23 15.6(1)S2 16.2(0.295) 16.3(0.94) 15.5.3S3.
Affected configurations
• cisco ios xe 3.13.6s
• cisco ios xe 3.16.2s
• cisco ios xe 3.17.1s
Related
Weakness · CWE (1)
- CWE-665 Improper Initialization weakness
References
- http://www.securityfocus.com/bid/95934 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037770 www.securitytracker.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-asrsnmp Vendor Advisory
- http://www.securityfocus.com/bid/95934 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037770 www.securitytracker.com
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-asrsnmp Vendor Advisory