Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2017-3861 Details
Description
Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service (DoS) condition. These vulnerabilities are due to improper parsing of crafted EnergyWise packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed by an affected device. An exploit could allow the attacker to cause a buffer overflow condition or a reload of the affected device, leading to a DoS condition. Cisco IOS Software and Cisco IOS XE Software support EnergyWise for IPv4 communication. Only IPv4 packets destined to a device configured as an EnergyWise domain member can trigger these vulnerabilities. IPv6 packets cannot be used to trigger these vulnerabilities. Cisco Bug ID CSCut47751.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywise | CVE | Vendor Advisory |
| http://www.securityfocus.com/bid/97935 | CVE | Third Party AdvisoryVDB Entry |
| http://www.securitytracker.com/id/1038313 | CVE | |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywise | [email protected] | Vendor Advisory |
| http://www.securityfocus.com/bid/97935 | [email protected] | Third Party AdvisoryVDB Entry |
| http://www.securitytracker.com/id/1038313 | [email protected] |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| cisco ios | 12.2(33)sxi4 12.2(33)sxi4a 12.2(33)sxi5 12.2(33)sxi6 12.2(33)sxi7 12.2(33)sxi8 12.2(33)sxi8a 12.2(33)sxi9 12.2(33)sxi10 12.2(33)sxi11 12.2(33)sxi12 12.2(33)sxi13 12.2(33)sxi14 12.2(33)sxj 12.2(33)sxj1 12.2(33)sxj2 12.2(33)sxj3 12.2(33)sxj4 12.2(33)sxj5 12.2(33)sxj6 12.2(33)sxj7 12.2(33)sxj8 12.2(33)sxj9 12.2(33)sxj10 12.2(52)ex 12.2(52)ex1 12.2(52)ey 12.2(52)ey1 12.2(52)ey1b 12.2(52)ey1c 12.2(52)ey2 12.2(52)ey2a 12.2(52)ey3 12.2(52)ey3a 12.2(52)ey4 12.2(53)ex 12.2(53)ey 12.2(53)ez 12.2(53)se 12.2(53)se1 12.2(53)se2 12.2(54)se 12.2(54)sg 12.2(54)sg1 12.2(54)wo 12.2(54)xo 12.2(55)ex 12.2(55)ex1 12.2(55)ex2 12.2(55)ex3 12.2(55)ey 12.2(55)ez 12.2(55)se 12.2(55)se1 12.2(55)se2 12.2(55)se3 12.2(55)se4 12.2(55)se5 12.2(55)se6 12.2(55)se7 12.2(55)se8 12.2(55)se9 12.2(55)se10 12.2(55)se11 12.2(58)ey 12.2(58)ey1 12.2(58)ey2 12.2(58)se 12.2(58)se1 12.2(58)se2 12.2(60)ez 12.2(60)ez1 12.2(60)ez2 12.2(60)ez3 12.2(60)ez4 12.2(60)ez5 12.2(60)ez6 12.2(60)ez7 12.2(60)ez8 12.2(60)ez9 15.0(1)m2 15.0(1)m3 15.0(1)m4 15.0(1)m5 15.0(1)m6 15.0(1)m7 15.0(1)m8 15.0(1)m9 15.0(1)m10 15.0(1)se 15.0(1)se1 15.0(1)se2 15.0(1)se3 15.0(1)sy1 15.0(1)sy2 15.0(1)sy3 15.0(1)sy4 15.0(1)sy5 15.0(1)sy6 15.0(1)sy7 15.0(1)sy7a 15.0(1)sy8 15.0(1)sy9 15.0(1)sy10 15.0(1)xo 15.0(1)xo1 15.0(2)ed 15.0(2)ed1 15.0(2)eh 15.0(2)ej 15.0(2)ej1 15.0(2)ek 15.0(2)ek1 15.0(2)ex 15.0(2)ex1 15.0(2)ex2 15.0(2)ex3 15.0(2)ex4 15.0(2)ex5 15.0(2)ex8 15.0(2)ex10 15.0(2)ez 15.0(2)se 15.0(2)se1 15.0(2)se2 15.0(2)se3 15.0(2)se4 15.0(2)se5 15.0(2)se6 15.0(2)se7 15.0(2)se9 15.0(2)se10 15.0(2)sg 15.0(2)sg1 15.0(2)sg2 15.0(2)sg3 15.0(2)sg4 15.0(2)sg5 15.0(2)sg6 15.0(2)sg7 15.0(2)sg8 15.0(2)xo 15.0(2a)ex5 15.0(2a)se9 15.1(1)sg 15.1(1)sg1 15.1(1)sg2 15.1(1)sy 15.1(1)sy2 15.1(1)sy3 15.1(1)sy4 15.1(1)sy5 15.1(1)sy6 15.1(1)t 15.1(1)t1 15.1(1)t2 15.1(1)t3 15.1(1)t4 15.1(1)t5 15.1(2)gc 15.1(2)gc1 15.1(2)gc2 15.1(2)sg 15.1(2)sg1 15.1(2)sg2 15.1(2)sg3 15.1(2)sg4 15.1(2)sg5 15.1(2)sg6 15.1(2)sg7 15.1(2)sg8 15.1(2)sy 15.1(2)sy1 15.1(2)sy2 15.1(2)sy3 15.1(2)sy4 15.1(2)sy4a 15.1(2)sy5 15.1(2)sy6 15.1(2)sy7 15.1(2)sy8 15.1(2)sy10 15.1(2)t 15.1(2)t0a 15.1(2)t1 15.1(2)t2 15.1(2)t2a 15.1(2)t3 15.1(2)t4 15.1(2)t5 15.1(3)t 15.1(3)t1 15.1(3)t2 15.1(3)t3 15.1(3)t4 15.1(4)gc 15.1(4)gc1 15.1(4)gc2 15.1(4)m 15.1(4)m1 15.1(4)m2 15.1(4)m3 15.1(4)m3a 15.1(4)m4 15.1(4)m5 15.1(4)m6 15.1(4)m7 15.1(4)m8 15.1(4)m9 15.1(4)m10 15.2(1)e 15.2(1)e1 15.2(1)e2 15.2(1)e3 15.2(1)gc 15.2(1)gc1 15.2(1)gc2 15.2(1)sy 15.2(1)sy0a 15.2(1)sy1 15.2(1)sy1a 15.2(1)sy2 15.2(1)sy3 15.2(1)t 15.2(1)t1 15.2(1)t2 15.2(1)t3 15.2(1)t3a 15.2(1)t4 15.2(2)e 15.2(2)e1 15.2(2)e2 15.2(2)e4 15.2(2)e5 15.2(2)e5a 15.2(2)eb 15.2(2)eb1 15.2(2)eb2 15.2(2)gc 15.2(2)sy 15.2(2)sy1 15.2(2)sy2 15.2(2)t 15.2(2)t1 15.2(2)t2 15.2(2)t3 15.2(2)t4 15.2(2a)e1 15.2(3)e 15.2(3)e1 15.2(3)e2 15.2(3)e3 15.2(3)gc 15.2(3)gc1 15.2(3)t 15.2(3)t1 15.2(3)t2 15.2(3)t3 15.2(3)t4 15.2(3a)e 15.2(3m)e2 15.2(4)e 15.2(4)gc 15.2(4)gc1 15.2(4)gc2 15.2(4)gc3 15.2(4)m 15.2(4)m1 15.2(4)m2 15.2(4)m3 15.2(4)m4 15.2(4)m5 15.2(4)m6 15.2(4)m6a 15.2(4)m7 15.2(4)m8 15.2(4)m9 15.2(4)m10 15.2(4)m11 15.3(1)sy 15.3(1)sy2 15.3(1)t 15.3(1)t1 15.3(1)t2 15.3(1)t3 15.3(1)t4 15.3(2)t 15.3(2)t1 15.3(2)t2 15.3(2)t3 15.3(2)t4 15.3(3)m 15.3(3)m1 15.3(3)m2 15.3(3)m3 15.3(3)m4 15.3(3)m5 15.3(3)m6 15.3(3)m7 15.3(3)m9 15.4(1)cg 15.4(1)cg1 15.4(1)sy 15.4(1)sy1 15.4(1)t 15.4(1)t1 15.4(1)t2 15.4(1)t3 15.4(1)t4 15.4(2)cg 15.4(2)t 15.4(2)t1 15.4(2)t2 15.4(2)t3 15.4(2)t4 15.4(3)m 15.4(3)m1 15.4(3)m2 15.4(3)m3 15.4(3)m4 15.4(3)m5 15.4(3)m6 15.4(3)m6a 15.4(3)m7 15.5(1)t 15.5(1)t1 15.5(1)t2 15.5(1)t3 15.5(2)t 15.5(2)t1 15.5(2)t2 15.5(2)t3 15.5(2)t4 15.5(3)m0a 15.5(3)m1 15.5(3)m2 15.5(3)m4 15.5(3)m4a 15.5(3)m5 15.5(3)s5 15.6(1)t 15.6(1)t0a 15.6(1)t1 15.6(1)t2 15.6(2)t 15.6(2)t1 15.6(2)t2 15.6(3)m 15.6(3)m0a 15.6(3)m1 15.6(3)m1b 15.6(3)m2 |
CPE
Remediation
| |
| cisco ios xe | 3.2.1sg 3.2.8sg 3.3.1sg 3.3.1sq 3.4.1sg 3.4.2sg 3.4.3sg 3.4.6sg 3.4.8sg 3.5.1e 3.5.3e 3.6.0e 3.6.1e 3.6.2ae 3.6.2e 3.6.4e 3.6.5ae 3.6.5e 3.7.0e 3.7.1e 3.7.2e 3.7.3e 3.8.0e 3.18.1sp |
CPE
Remediation
| |
Change History
8 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| May 13, 2026 | CVE Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Oct 9, 2019 | CVE Modified | [email protected] |
| Jul 11, 2017 | CVE Modified | [email protected] |
| Apr 28, 2017 | Initial Analysis | [email protected] |
| Apr 22, 2017 | CVE Modified | [email protected] |