Description
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: (1) the failure to restrict the use of CMP-specific Telnet options only to internal, local communications between cluster members and instead accept and process such options over any Telnet connection to an affected device; and (2) the incorrect processing of malformed CMP-specific Telnet options. An attacker could exploit this vulnerability by sending malformed CMP-specific Telnet options while establishing a Telnet session with an affected Cisco device configured to accept Telnet connections. An exploit could allow an attacker to execute arbitrary code and obtain full control of the device or cause a reload of the affected device. This affects Catalyst switches, Embedded Service 2020 switches, Enhanced Layer 2 EtherSwitch Service Module, Enhanced Layer 2/3 EtherSwitch Service Module, Gigabit Ethernet Switch Module (CGESM) for HP, IE Industrial Ethernet switches, ME 4924-10GE switch, RF Gateway 10, and SM-X Layer 2/3 EtherSwitch Service Module. Cisco Bug IDs: CSCvd48893.
Published: 2017-03-17
Score: 9.8 Critical
EPSS: 94.3% High
KEV: Yes
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 22 Oct 2025 00:30:00 +0000


Tue, 21 Oct 2025 20:30:00 +0000


Tue, 21 Oct 2025 19:30:00 +0000


Fri, 15 Nov 2024 18:15:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-03-25'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Cisco Catalyst 2350-48td-s Catalyst 2350-48td-sd Catalyst 2360-48td-s Catalyst 2918-24tc-c Catalyst 2918-24tt-c Catalyst 2918-48tc-c Catalyst 2918-48tt-c Catalyst 2928-24tc-c Catalyst 2960-24-s Catalyst 2960-24lc-s Catalyst 2960-24lt-l Catalyst 2960-24pc-l Catalyst 2960-24pc-s Catalyst 2960-24tc-l Catalyst 2960-24tc-s Catalyst 2960-24tt-l Catalyst 2960-48pst-l Catalyst 2960-48pst-s Catalyst 2960-48tc-l Catalyst 2960-48tc-s Catalyst 2960-48tt-l Catalyst 2960-48tt-s Catalyst 2960-8tc-l Catalyst 2960-8tc-s Catalyst 2960-plus 24lc-l Catalyst 2960-plus 24lc-s Catalyst 2960-plus 24pc-l Catalyst 2960-plus 24pc-s Catalyst 2960-plus 24tc-l Catalyst 2960-plus 24tc-s Catalyst 2960-plus 48pst-l Catalyst 2960-plus 48pst-s Catalyst 2960-plus 48tc-l Catalyst 2960-plus 48tc-s Catalyst 2960c-12pc-l Catalyst 2960c-8pc-l Catalyst 2960c-8tc-l Catalyst 2960c-8tc-s Catalyst 2960cg-8tc-l Catalyst 2960cpd-8pt-l Catalyst 2960cpd-8tt-l Catalyst 2960cx-8pc-l Catalyst 2960cx-8tc-l Catalyst 2960g-24tc-l Catalyst 2960g-48tc-l Catalyst 2960g-8tc-l Catalyst 2960l-16ps-ll Catalyst 2960l-16ts-ll Catalyst 2960l-24ps-ll Catalyst 2960l-24ts-ll Catalyst 2960l-48ps-ll Catalyst 2960l-48ts-ll Catalyst 2960l-8ps-ll Catalyst 2960l-8ts-ll Catalyst 2960pd-8tt-l Catalyst 2960s-24pd-l Catalyst 2960s-24ps-l Catalyst 2960s-24td-l Catalyst 2960s-24ts-l Catalyst 2960s-24ts-s Catalyst 2960s-48fpd-l Catalyst 2960s-48fps-l Catalyst 2960s-48lpd-l Catalyst 2960s-48lps-l Catalyst 2960s-48td-l Catalyst 2960s-48ts-l Catalyst 2960s-48ts-s Catalyst 2960s-f24ps-l Catalyst 2960s-f24ts-l Catalyst 2960s-f24ts-s Catalyst 2960s-f48fps-l Catalyst 2960s-f48lps-l Catalyst 2960s-f48ts-l Catalyst 2960s-f48ts-s Catalyst 2960x-24pd-l Catalyst 2960x-24ps-l Catalyst 2960x-24psq-l Catalyst 2960x-24td-l Catalyst 2960x-24ts-l Catalyst 2960x-24ts-ll Catalyst 2960x-48fpd-l Catalyst 2960x-48fps-l Catalyst 2960x-48lpd-l Catalyst 2960x-48lps-l Catalyst 2960x-48td-l Catalyst 2960x-48ts-l Catalyst 2960x-48ts-ll Catalyst 2960xr-24pd-i Catalyst 2960xr-24pd-l Catalyst 2960xr-24ps-i Catalyst 2960xr-24ps-l Catalyst 2960xr-24td-i Catalyst 2960xr-24td-l Catalyst 2960xr-24ts-i Catalyst 2960xr-24ts-l Catalyst 2960xr-48fpd-i Catalyst 2960xr-48fpd-l Catalyst 2960xr-48fps-i Catalyst 2960xr-48fps-l Catalyst 2960xr-48lpd-i Catalyst 2960xr-48lpd-l Catalyst 2960xr-48lps-i Catalyst 2960xr-48lps-l Catalyst 2960xr-48td-i Catalyst 2960xr-48td-l Catalyst 2960xr-48ts-i Catalyst 2960xr-48ts-l Catalyst 2970g-24t Catalyst 2970g-24ts Catalyst 2975 Catalyst 3550 12g Catalyst 3550 12t Catalyst 3550 24 Dc Smi Catalyst 3550 24 Emi Catalyst 3550 24 Fx Smi Catalyst 3550 24 Pwr Catalyst 3550 24 Smi Catalyst 3550 48 Emi Catalyst 3550 48 Smi Catalyst 3560-12pc-s Catalyst 3560-24ps Catalyst 3560-24ts Catalyst 3560-48ps Catalyst 3560-48ts Catalyst 3560-8pc Catalyst 3560c-12pc-s Catalyst 3560c-8pc-s Catalyst 3560cg-8pc-s Catalyst 3560cg-8tc-s Catalyst 3560cpd-8pt-s Catalyst 3560cx-12pc-s Catalyst 3560cx-12pd-s Catalyst 3560cx-12tc-s Catalyst 3560cx-8pc-s Catalyst 3560cx-8pt-s Catalyst 3560cx-8tc-s Catalyst 3560cx-8xpd-s Catalyst 3560e-12d-e Catalyst 3560e-12d-s Catalyst 3560e-12sd-e Catalyst 3560e-12sd-s Catalyst 3560e-24pd-e Catalyst 3560e-24pd-s Catalyst 3560e-24td-e Catalyst 3560e-24td-s Catalyst 3560e-48pd-e Catalyst 3560e-48pd-ef Catalyst 3560e-48pd-s Catalyst 3560e-48pd-sf Catalyst 3560e-48td-e Catalyst 3560e-48td-s Catalyst 3560g-24ps Catalyst 3560g-24ts Catalyst 3560g-48ps Catalyst 3560g-48ts Catalyst 3560v2-24dc Catalyst 3560v2-24ps Catalyst 3560v2-24ts Catalyst 3560v2-48ps Catalyst 3560v2-48ts Catalyst 3560x-24p-e Catalyst 3560x-24p-l Catalyst 3560x-24p-s Catalyst 3560x-24t-e Catalyst 3560x-24t-l Catalyst 3560x-24t-s Catalyst 3560x-24u-e Catalyst 3560x-24u-l Catalyst 3560x-24u-s Catalyst 3560x-48p-e Catalyst 3560x-48p-l Catalyst 3560x-48p-s Catalyst 3560x-48pf-e Catalyst 3560x-48pf-l Catalyst 3560x-48pf-s Catalyst 3560x-48t-e Catalyst 3560x-48t-l Catalyst 3560x-48t-s Catalyst 3560x-48u-e Catalyst 3560x-48u-l Catalyst 3560x-48u-s Catalyst 3750-24fs Catalyst 3750-24ps Catalyst 3750-24ts Catalyst 3750-48ps Catalyst 3750-48ts Catalyst 3750 Metro 24-ac Catalyst 3750 Metro 24-dc Catalyst 3750e-24pd-e Catalyst 3750e-24pd-s Catalyst 3750e-24td-e Catalyst 3750e-24td-s Catalyst 3750e-48pd-e Catalyst 3750e-48pd-ef Catalyst 3750e-48pd-s Catalyst 3750e-48pd-sf Catalyst 3750e-48td-e Catalyst 3750e-48td-s Catalyst 3750g-12s Catalyst 3750g-12s-sd Catalyst 3750g-16td Catalyst 3750g-24ps Catalyst 3750g-24t Catalyst 3750g-24ts Catalyst 3750g-24ts-1u Catalyst 3750g-48ps Catalyst 3750g-48ts Catalyst 3750v2-24fs Catalyst 3750v2-24ps Catalyst 3750v2-24ts Catalyst 3750v2-48ps Catalyst 3750v2-48ts Catalyst 3750x-12s-e Catalyst 3750x-12s-s Catalyst 3750x-24p-e Catalyst 3750x-24p-l Catalyst 3750x-24p-s Catalyst 3750x-24s-e Catalyst 3750x-24s-s Catalyst 3750x-24t-e Catalyst 3750x-24t-l Catalyst 3750x-24t-s Catalyst 3750x-24u-e Catalyst 3750x-24u-l Catalyst 3750x-24u-s Catalyst 3750x-48p-e Catalyst 3750x-48p-l Catalyst 3750x-48p-s Catalyst 3750x-48pf-e Catalyst 3750x-48pf-l Catalyst 3750x-48pf-s Catalyst 3750x-48t-e Catalyst 3750x-48t-l Catalyst 3750x-48t-s Catalyst 3750x-48u-e Catalyst 3750x-48u-l Catalyst 3750x-48u-s Catalyst 4000 Supervisor Engine I Catalyst 4000 Supervisor Engine Iv Catalyst 4000 Supervisor Engine V Catalyst 4500 Supervisor Engine 6-e Catalyst 4500 Supervisor Engine 6l-e Catalyst 4500 Supervisor Engine Ii-plus Catalyst 4500 Supervisor Engine Ii-plus-ts Catalyst 4500 Supervisor Engine Iv Catalyst 4500 Supervisor Engine V Catalyst 4500 Supervisor Engine V-10ge Catalyst 4500 Supervisor Ii-plus-10ge Catalyst 4500e Supervisor Engine 8-e Catalyst 4900m Catalyst 4928 10 Gigabit Ethernet Switch Catalyst 4948 Catalyst 4948 10 Gigabit Ethernet Switch Catalyst 4948e-f Ethernet Switch Catalyst 4948e Ethernet Switch Catalyst Blade Switch 3020 Catalyst Blade Switch 3030 Catalyst Blade Switch 3032 Catalyst Blade Switch 3040 Catalyst Blade Switch 3120 Catalyst Blade Switch 3120x Catalyst Blade Switch 3130 Catalyst C2928-24lt-c Catalyst C2928-48tc-c Catalyst Switch Module 3012 Catalyst Switch Module 3110 Catalyst Switch Module 3110x Embedded Service 2020 24tc Con Embedded Service 2020 24tc Con B Embedded Service 2020 24tc Ncp Embedded Service 2020 24tc Ncp B Embedded Service 2020 Con Embedded Service 2020 Con B Embedded Service 2020 Ncp Embedded Service 2020 Ncp B Enhanced Layer 2\/3 Etherswitch Service Module Enhanced Layer 2 Etherswitch Service Module Gigabit Ethernet Switch Module \(cgesm\) Ie-3010-16s-8pc Industrial Ethernet Switch Ie-3010-24tc Industrial Ethernet Switch Ie-4000-16gt4g-e Industrial Ethernet Switch Ie-4000-16t4g-e Industrial Ethernet Switch Ie-4000-4gc4gp4g-e Industrial Ethernet Switch Ie-4000-4gs8gp4g-e Industrial Ethernet Switch Ie-4000-4s8p4g-e Industrial Ethernet Switch Ie-4000-4t4p4g-e Industrial Ethernet Switch Ie-4000-4tc4g-e Industrial Ethernet Switch Ie-4000-8gs4g-e Industrial Ethernet Switch Ie-4000-8gt4g-e Industrial Ethernet Switch Ie-4000-8gt8gp4g-e Industrial Ethernet Switch Ie-4000-8s4g-e Industrial Ethernet Switch Ie-4000-8t4g-e Industrial Ethernet Switch Ie-4010-16s12p Industrial Ethernet Switch Ie-4010-4s24p Industrial Ethernet Switch Ie-5000-12s12p-10g Industrial Ethernet Switch Ie-5000-16s12p Industrial Ethernet Switch Ie 2000-16ptc-g Industrial Ethernet Switch Ie 2000-16t67 Industrial Ethernet Switch Ie 2000-16t67p Industrial Ethernet Switch Ie 2000-16tc-g-e Industrial Ethernet Switch Ie 2000-16tc-g-n Industrial Ethernet Switch Ie 2000-16tc-g-x Industrial Ethernet Switch Ie 2000-16tc-g Industrial Ethernet Switch Ie 2000-16tc Industrial Ethernet Switch Ie 2000-24t67 Industrial Ethernet Switch Ie 2000-4s-ts-g Industrial Ethernet Switch Ie 2000-4t-g Industrial Ethernet Switch Ie 2000-4t Industrial Ethernet Switch Ie 2000-4ts-g Industrial Ethernet Switch Ie 2000-4ts Industrial Ethernet Switch Ie 2000-8t67 Industrial Ethernet Switch Ie 2000-8t67p Industrial Ethernet Switch Ie 2000-8tc-g-e Industrial Ethernet Switch Ie 2000-8tc-g-n Industrial Ethernet Switch Ie 2000-8tc-g Industrial Ethernet Switch Ie 2000-8tc Industrial Ethernet Switch Ie 3000-4tc Industrial Ethernet Switch Ie 3000-8tc Industrial Ethernet Switch Ios Ios Xe Me 4924-10ge Rf Gateway 10 Sm-x Layer 2\/3 Etherswitch Service Module
cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2026-01-12T20:45:44.634Z

Reserved: 2016-12-21T00:00:00.000Z

Link: CVE-2017-3881

cve-icon Vulnrichment

Updated: 2024-08-05T14:39:41.294Z

cve-icon NVD

Status : Deferred

Published: 2017-03-17T22:59:00.640

Modified: 2026-01-12T21:15:51.593

Link: CVE-2017-3881

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses