QID 316912

A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software
could allow an unauthenticated, remote attacker to prevent an affected device
from resolving ARP entries for legitimate hosts on the connected subnets.

Affected Products
Cisco devices if they were running a vulnerable release of Cisco IOS or IOS XE Software.

QID Detection Logic (Authenticated):
The check matches Cisco IOS XE version retrieved via Unix Auth using "show version" command.
QID Detection Logic (Unauthenticated):
The check matches Cisco IOS XE version retrieved via SNMP or TCP/IP Fingerprint or NTP or Telnet.

A successful exploit could allow the attacker to cause ARP requests on the device to be unsuccessful
for legitimate hosts, resulting in a denial of service (DoS) condition.