CVE-2017-3824
Last modified
CVE-2017-3824 is a vulnerability of currently unknown severity. A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition. Cisco cBR-8 Converged Broadband Routers running vulnerable versions of Cisco IOS XE are affected. EPSS estimates a 2.08% chance of exploitation in the next 30 days.
Description
A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition. Cisco cBR-8 Converged Broadband Routers running vulnerable versions of Cisco IOS XE are affected. More Information: CSCux40637. Known Affected Releases: 15.5(3)S 15.6(1)S. Known Fixed Releases: 15.5(3)S2 15.6(1)S1 15.6(2)S 15.6(2)SP 16.4(1).
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios Xe | 3.16.0 |
| Cisco | Ios Xe | 3.16.1 |
| Cisco | Ios Xe | 3.17.0 |
References
- http://www.securityfocus.com/bid/95937Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/95937Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-3824?
How severe is CVE-2017-3824?
How do I fix CVE-2017-3824?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-3818A vulnerability in the Multipurpose Internet Mail Extensions…
- CVE-2017-3819A privilege escalation vulnerability in the Secure Shell (SS…
- CVE-2017-3820A vulnerability in Simple Network Management Protocol (SNMP)…
- CVE-2017-3821A vulnerability in the serviceability page of Cisco Unified …
- CVE-2017-3822A vulnerability in the logging subsystem of the Cisco Firepo…5.3
- CVE-2017-3823An issue was discovered in the Cisco WebEx Extension before …
- CVE-2017-3825A vulnerability in the ICMP ingress packet processing of Cis…
- CVE-2017-3826A vulnerability in the Stream Control Transmission Protocol …
- CVE-2017-3827A vulnerability in the Multipurpose Internet Mail Extensions…
- CVE-2017-3828A vulnerability in the web-based management interface of Cis…
- CVE-2017-3829A vulnerability in the web-based management interface of Cis…
- CVE-2017-3830A vulnerability in an internal API of the Cisco Meeting Serv…
Are you affected by CVE-2017-3824?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
