PT-2017-16114 · Cisco · Cisco Industrial Ethernet 2000 Series Switches

Publicado 2017-02-03 · Atualizado 2019-10-03 · CVE-2017-3812

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Industrial Ethernet 2000 Series Switches versions 15.2(5.4.32i)E2 through 15.2(5.4.61i)E2

Description A memory leak in the Common Industrial Protocol (CIP) functionality could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.

Recommendations For versions 15.2(5.4.32i)E2 through 15.2(5.4.61i)E2, update to version 15.2(5.4.62i)E2 to resolve the issue.

Correção

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

CVE-2017-3812

Produtos afetados

Cisco Industrial Ethernet 2000 Series Switches

Referências · 5

• http://securityfocus.com/bid/95946 · Nota
• http://securitytracker.com/id/1037771 · Nota
• https://osv.dev/vulnerability/CVE-2017-3812 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-3812 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-psc1 · Aviso do Fabricante