CVE-2017-3883
Severity
8.6HIGH
EPSS
1.8%
top 17.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 19
Latest updateMay 13
Description
A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability occurs because AAA processes prevent the NX-OS System Manager from receiving keepalive messages when an affected device receives a high rate of login attempts, such as in a brute-force login attack. System memory can run low …
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 3.9 | Impact: 4.0
Affected Packages3 packages
🔴Vulnerability Details
2GHSA▶
GHSA-v65q-78qf-p4jg: A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX↗2022-05-13
CVEList▶
CVE-2017-3883: A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX↗2017-10-19
📋Vendor Advisories
1Cisco▶
Cisco FXOS and NX-OS System Software Authentication, Authorization, and Accounting Denial of Service Vulnerability↗2017-10-18
💬Community
1Bugzilla▶
CVE-2017-5361 rt: timing side-channel attack in secrets constant-time comparison algorithm↗2017-07-26