PT-2017-2361 · Cisco · Cisco Ios Xr

Published 2017-05-03 · Updated 2019-10-03 · CVE-2017-3876

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 6.1.1

Description The issue is related to errors in resource management in the Event Management Service of Cisco IOS XR routers. It can be exploited by a remote, unauthenticated attacker to cause a denial of service condition on the affected device. The vulnerability is caused by improper handling of gRPC requests. An attacker can exploit this by repeatedly sending unauthenticated gRPC requests to the device. A successful exploit could allow the attacker to crash the device, requiring manual intervention for recovery.

Recommendations For Cisco IOS XR version 6.1.1, update to a newer version that includes the fix for this issue. As a temporary workaround, consider disabling the gRPC service on the affected device until a patch is available.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2017-01561

CVE-2017-3876

Affected Products

Cisco Ios Xr

References · 6

• https://osv.dev/vulnerability/CVE-2017-3876 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3876 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170503-ios-xr · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01561 · Security Note
• http://securitytracker.com/id/1038393 · Note
• http://securityfocus.com/bid/98284 · Note