CVE-2017-3804
published 2017-01-26CVE-2017-3804: A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software…
PriorityP427medium6.1CVSS 3.0
AVAACHPRNUINSCCNINAH
EPSS
0.63%
46.6th percentile
A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath domain crash because of an __inst_001__isis_fabricpath hap reset when processing a crafted link-state packet. More Information: CSCvc45002. Known Affected Releases: 7.1(3)N1(2.1) 7.1(3)N1(3.12) 7.3(2)N1(0.296) 8.0(1)S2. Known Fixed Releases: 6.2(18)S11 7.0(3)I5(1.170) 7.0(3)I5(2) 7.1(4)N1(0.4) 7.1(4)N1(1b) 7.1(5)N1(0.986) 7.1(5)N1(1) 7.2(3)D1(0.8) 7.3(2)N1(0.304) 7.3(2)N1(1) 8.0(0.96)S0 8.0(1) 8.0(1)E1 8.0(1)S4 8.3(0)CV(0.788).
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | nexus_5000_6000_and_7000_series_switches | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
nvdv2.05.7MEDIUMAV:A/AC:M/Au:N/C:N/I:N/A:C
vendor_cisco5.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Cisco NX-OS on Nexus 5000/Nexus 6000/Nexus 7000 IS-IS Protocol resource management (CSCvc45002 / Nessus ID 102995)
vuldb·2026-05-14·CVSS 6.1
CVE-2017-3804 [MEDIUM] Cisco NX-OS on Nexus 5000/Nexus 6000/Nexus 7000 IS-IS Protocol resource management (CSCvc45002 / Nessus ID 102995)
A vulnerability classified as problematic has been found in Cisco NX-OS 7.1(3)N1(2.1)/7.1(3)N1(3.12)/7.3(2)N1(0.296)/8.0(1)S2 on Nexus 5000/Nexus 6000/Nexus 7000. Affected by this vulnerability is an unknown functionality of the component IS-IS Protocol Handler. Performing a manipulation results in improper resource management.
This vulnerability is reported as CVE-2017-3804. The attacker must have access to the local network to execute the attack. No exploit exists.
It is recommended to upgrade the affected component.
GHSA
GHSA-4m2r-jc4j-cmfx: A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches s
ghsa_unreviewed·2022-05-13
CVE-2017-3804 [MEDIUM] GHSA-4m2r-jc4j-cmfx: A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches s
A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath domain crash because of an __inst_001__isis_fabricpath hap reset when processing a crafted link-state packet. More Information: CSCvc45002. Known Affected Releases: 7.1(3)N1(2.1) 7.1(3)N1(3.12) 7.3(2)N1(0.296) 8.0(1)S2. Known Fixed Releases: 6.2(18)S11 7.0(3)I5(1.170) 7.0(3)I5(2) 7.1(4)N1(0.4) 7.1(4)N1(1b) 7.1(5)N1(0.986) 7.1(5)N1(1) 7.2(3)D1(0.8) 7.3(2)N1(0.304) 7.3(2)N1(1) 8.0(0.96)S0 8.0(1) 8.0(1)E1 8.0(1)S4 8.3(0)CV(0.788).
Cisco
Cisco Nexus 5000, 6000, and 7000 Series Switches Software IS-IS Packet Processing Denial of Service Vulnerability
vendor_cisco·2017-01-18·CVSS 5.8
CVE-2017-3804 [MEDIUM] CWE-399 Cisco Nexus 5000, 6000, and 7000 Series Switches Software IS-IS Packet Processing Denial of Service Vulnerability
Cisco Nexus 5000, 6000, and 7000 Series Switches Software IS-IS Packet Processing Denial of Service Vulnerability
A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device.
The vulnerability is due to improper processing of crafted IS-IS protocol packets. An attacker could exploit this vulnerability by sending a crafted IS-IS protocol packet over an established adjacency. An exploit could allow the attacker to cause a reload of the affected device.
There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/cen
Cisco
Cisco Nexus 5000, 6000, and 7000 Series Switches Software IS-IS Packet Processing Denial of Service Vulnerability
vendor_cisco·CVSS 3.0
CVE-2017-3804 Cisco Nexus 5000, 6000, and 7000 Series Switches Software IS-IS Packet Processing Denial of Service Vulnerability
CVE-2017-3804: Cisco Nexus 5000, 6000, and 7000 Series Switches Software IS-IS Packet Processing Denial of Service Vulnerability
A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. The vulnerability is due to improper processing of crafted IS-IS protocol packets. An attacker could exploit this vulnerability by sending a crafted IS-IS protocol packet over an established adjacency. An exploit could allow the attacker to cause a reload of the affected device. There are no
CVSS: 3.0
CWE: CWE-399, CWE-399
Bug IDs: CSCvc45002
No detection rules found.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/95638http://www.securitytracker.com/id/1037658https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-nexushttp://www.securityfocus.com/bid/95638http://www.securitytracker.com/id/1037658https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-nexus
2017-01-26
Published