CVE-2017-3879

CVE	CVE-2017-3879
State	PUBLISHED
Assigner	cisco
Source Priority	CVE Program / NVD first with legacy fallback
Published	2017-03-17 22:59:00 UTC
Updated	2025-04-20 01:37:25 UTC
Description	A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user traffic flowing through the device. The attacker could use either a Telnet or an SSH client for the remote login attempt. Affected Products: This vulnerability affects Cisco Nexus 9000 Series Switches that are running Cisco NX-OS Software and are configured to allow remote Telnet connections to the device. More Information: CSCuy25824. Known Affected Releases: 7.0(3)I3(1) 8.3(0)CV(0.342) 8.3(0)CV(0.345). Known Fixed Releases: 8.3(0)CV(0.362) 8.0(1) 7.0(3)IED5(0.19) 7.0(3)IED5(0) 7.0(3)I4(1) 7.0(3)I4(0.8) 7.0(3)I2(2e) 7.0(3)F1(1.22) 7.0(3)F1(1) 7.0(3)F1(0.230).

Primary CVSS: v3.0 5.3 MEDIUM from [email protected]

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Problem Types: CWE-119 | Denial of Service Vulnerability

Version	Source	Type	Score	Severity	Vector
3.0	[email protected]	Primary	5.3	MEDIUM	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L`
2.0	[email protected]	Primary	5		`AV:N/AC:L/Au:N/C:N/I:N/A:P`

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Access Vector

Network

Access Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

AV:N/AC:L/Au:N/C:N/I:N/A:P

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Cisco	Nexus 92160yc Switch	-	All	All	All
Hardware	Cisco	Nexus 92300yc Switch	-	All	All	All
Hardware	Cisco	Nexus 92304qc Switch	-	All	All	All
Hardware	Cisco	Nexus 9236c Switch	-	All	All	All
Hardware	Cisco	Nexus 9272q Switch	-	All	All	All
Hardware	Cisco	Nexus 93108tc-ex Switch	-	All	All	All
Hardware	Cisco	Nexus 93120tx Switch	-	All	All	All
Hardware	Cisco	Nexus 93128tx Switch	-	All	All	All
Hardware	Cisco	Nexus 93180lc-ex Switch	-	All	All	All
Hardware	Cisco	Nexus 93180yc-ex Switch	-	All	All	All
Hardware	Cisco	Nexus 9332pq Switch	-	All	All	All
Hardware	Cisco	Nexus 9336pq Aci Spine Switch	-	All	All	All
Hardware	Cisco	Nexus 9372px-e Switch	-	All	All	All
Hardware	Cisco	Nexus 9372px Switch	-	All	All	All
Hardware	Cisco	Nexus 9372tx-e Switch	-	All	All	All
Hardware	Cisco	Nexus 9372tx Switch	-	All	All	All
Hardware	Cisco	Nexus 9396px Switch	-	All	All	All
Hardware	Cisco	Nexus 9396tx Switch	-	All	All	All
Hardware	Cisco	Nexus 9508 Switch	-	All	All	All
Operating System	Cisco	Nx-os	7.0\(3\)i3\(0.170\)	All	All	All
Operating System	Cisco	Nx-os	8.3\(0\)cv\(0.342\)	All	All	All
Operating System	Cisco	Nx-os	8.3\(0\)cv\(0.345\)	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	Cisco Nexus 9000 Series Switches	affected Cisco Nexus 9000 Series Switches	Not specified

Reference	Source	Link	Tags
Cisco NX-OS Software CVE-2017-3879 Remote Denial of Service Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Third Party Advisory, VDB Entry
Cisco Nexus 9000 Series Switches Remote Login Denial of Service Vulnerability	af854a3a-2127-422b-91ae-364da2661108	tools.cisco.com	Vendor Advisory
Cisco Nexus 9000 Series Lets Remote Users Cause the Target Login Service to Crash - SecurityTracker	af854a3a-2127-422b-91ae-364da2661108	www.securitytracker.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.