CVE Feed

    Dashboard / CVE / CVE-2017-3878

    CVE-2017-3878

    A Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a Telnet process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user traffic flowing through the device. Affected Products: This vulnerability affects Cisco Nexus 9000 Series Switches that are running Cisco NX-OS Software and are configured to allow remote Telnet connections to the device. More Information: CSCux46778. Known Affected Releases: 7.0(3)I3(0.170). Known Fixed Releases: 7.0(3)I3(1) 7.0(3)I3(0.257) 7.0(3)I3(0.255) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1).

    Published:Mar 17, 2017
    Last Modified:Apr 20, 2025
    EPS:Mar 17, 2017
    EPSS Score:0.00873
    CVSS Score:5.3

    Affected Products

    Vendor
    Cisco
    Product
    Nexus 92160yc Switch
    Vendor
    Cisco
    Product
    Nexus 92300yc Switch
    Vendor
    Cisco
    Product
    Nexus 92304qc Switch
    Vendor
    Cisco
    Product
    Nexus 9236c Switch
    Vendor
    Cisco
    Product
    Nexus 9272q Switch
    Vendor
    Cisco
    Product
    Nexus 93108tc-ex Switch
    Vendor
    Cisco
    Product
    Nexus 93120tx Switch
    Vendor
    Cisco
    Product
    Nexus 93128tx Switch
    Vendor
    Cisco
    Product
    Nexus 93180lc-ex Switch
    Vendor
    Cisco
    Product
    Nexus 93180yc-ex Switch
    Vendor
    Cisco
    Product
    Nexus 9332pq Switch
    Vendor
    Cisco
    Product
    Nexus 9336pq Aci Spine Switch
    Vendor
    Cisco
    Product
    Nexus 9372px-e Switch
    Vendor
    Cisco
    Product
    Nexus 9372px Switch
    Vendor
    Cisco
    Product
    Nexus 9372tx-e Switch
    Vendor
    Cisco
    Product
    Nexus 9372tx Switch
    Vendor
    Cisco
    Product
    Nexus 9396px Switch
    Vendor
    Cisco
    Product
    Nexus 9396tx Switch
    Vendor
    Cisco
    Product
    Nexus 9508 Switch
    Vendor
    Cisco
    Product
    Nx-os

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-20284 (CVSS 5.3) — A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged…
    CVE-2024-20285 (CVSS 5.3) — A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged…
    CVE-2024-20286 (CVSS 5.3) — A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged…
    CVE-2024-20294 (CVSS 6.6) — A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Sof…
    CVE-2023-44487 (CVSS 7.5) — The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can …
    CVE-2021-1387 (CVSS 8.6) — A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker t…
    CVE-2018-0092 (CVSS 7.1) — A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow a…
    CVE-2017-3879 (CVSS 5.3) — A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High