A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: (1) the failure to restrict the use of CMP-specific Telnet options only to internal, local communications between cluster members and instead accept and process such options over any Telnet connection to an affected device; and (2) the incorrect processing of malformed CMP-specific Telnet options. An attacker could exploit this vulnerability by sending malformed CMP-specific Telnet options while establishing a Telnet session with an affected Cisco device configured to accept Telnet connections. An exploit could allow an attacker to execute arbitrary code and obtain full control of the device or cause a reload of the affected device. This affects Catalyst switches, Embedded Service 2020 switches, Enhanced Layer 2 EtherSwitch Service Module, Enhanced Layer 2/3 EtherSwitch Service Module, Gigabit Ethernet Switch Module (CGESM) for HP, IE Industrial Ethernet switches, ME 4924-10GE switch, RF Gateway 10, and SM-X Layer 2/3 EtherSwitch Service Module. Cisco Bug IDs: CSCvd48893.

Project Subscriptions

Vendors Products
Catalyst 2350-48td-s Subscribe
Catalyst 2350-48td-sd Subscribe
Catalyst 2360-48td-s Subscribe
Catalyst 2918-24tc-c Subscribe
Catalyst 2918-24tt-c Subscribe
Catalyst 2918-48tc-c Subscribe
Catalyst 2918-48tt-c Subscribe
Catalyst 2928-24tc-c Subscribe
Catalyst 2960-24-s Subscribe
Catalyst 2960-24lc-s Subscribe
Catalyst 2960-24lt-l Subscribe
Catalyst 2960-24pc-l Subscribe
Catalyst 2960-24pc-s Subscribe
Catalyst 2960-24tc-l Subscribe
Catalyst 2960-24tc-s Subscribe
Catalyst 2960-24tt-l Subscribe
Catalyst 2960-48pst-l Subscribe
Catalyst 2960-48pst-s Subscribe
Catalyst 2960-48tc-l Subscribe
Catalyst 2960-48tc-s Subscribe
Catalyst 2960-48tt-l Subscribe
Catalyst 2960-48tt-s Subscribe
Catalyst 2960-8tc-l Subscribe
Catalyst 2960-8tc-s Subscribe
Catalyst 2960-plus 24lc-l Subscribe
Catalyst 2960-plus 24lc-s Subscribe
Catalyst 2960-plus 24pc-l Subscribe
Catalyst 2960-plus 24pc-s Subscribe
Catalyst 2960-plus 24tc-l Subscribe
Catalyst 2960-plus 24tc-s Subscribe
Catalyst 2960-plus 48pst-l Subscribe
Catalyst 2960-plus 48pst-s Subscribe
Catalyst 2960-plus 48tc-l Subscribe
Catalyst 2960-plus 48tc-s Subscribe
Catalyst 2960c-12pc-l Subscribe
Catalyst 2960c-8pc-l Subscribe
Catalyst 2960c-8tc-l Subscribe
Catalyst 2960c-8tc-s Subscribe
Catalyst 2960cg-8tc-l Subscribe
Catalyst 2960cpd-8pt-l Subscribe
Catalyst 2960cpd-8tt-l Subscribe
Catalyst 2960cx-8pc-l Subscribe
Catalyst 2960cx-8tc-l Subscribe
Catalyst 2960g-24tc-l Subscribe
Catalyst 2960g-48tc-l Subscribe
Catalyst 2960g-8tc-l Subscribe
Catalyst 2960l-16ps-ll Subscribe
Catalyst 2960l-16ts-ll Subscribe
Catalyst 2960l-24ps-ll Subscribe
Catalyst 2960l-24ts-ll Subscribe
Catalyst 2960l-48ps-ll Subscribe
Catalyst 2960l-48ts-ll Subscribe
Catalyst 2960l-8ps-ll Subscribe
Catalyst 2960l-8ts-ll Subscribe
Catalyst 2960pd-8tt-l Subscribe
Catalyst 2960s-24pd-l Subscribe
Catalyst 2960s-24ps-l Subscribe
Catalyst 2960s-24td-l Subscribe
Catalyst 2960s-24ts-l Subscribe
Catalyst 2960s-24ts-s Subscribe
Catalyst 2960s-48fpd-l Subscribe
Catalyst 2960s-48fps-l Subscribe
Catalyst 2960s-48lpd-l Subscribe
Catalyst 2960s-48lps-l Subscribe
Catalyst 2960s-48td-l Subscribe
Catalyst 2960s-48ts-l Subscribe
Catalyst 2960s-48ts-s Subscribe
Catalyst 2960s-f24ps-l Subscribe
Catalyst 2960s-f24ts-l Subscribe
Catalyst 2960s-f24ts-s Subscribe
Catalyst 2960s-f48fps-l Subscribe
Catalyst 2960s-f48lps-l Subscribe
Catalyst 2960s-f48ts-l Subscribe
Catalyst 2960s-f48ts-s Subscribe
Catalyst 2960x-24pd-l Subscribe
Catalyst 2960x-24ps-l Subscribe
Catalyst 2960x-24psq-l Subscribe
Catalyst 2960x-24td-l Subscribe
Catalyst 2960x-24ts-l Subscribe
Catalyst 2960x-24ts-ll Subscribe
Catalyst 2960x-48fpd-l Subscribe
Catalyst 2960x-48fps-l Subscribe
Catalyst 2960x-48lpd-l Subscribe
Catalyst 2960x-48lps-l Subscribe
Catalyst 2960x-48td-l Subscribe
Catalyst 2960x-48ts-l Subscribe
Catalyst 2960x-48ts-ll Subscribe
Catalyst 2960xr-24pd-i Subscribe
Catalyst 2960xr-24pd-l Subscribe
Catalyst 2960xr-24ps-i Subscribe
Catalyst 2960xr-24ps-l Subscribe
Catalyst 2960xr-24td-i Subscribe
Catalyst 2960xr-24td-l Subscribe
Catalyst 2960xr-24ts-i Subscribe
Catalyst 2960xr-24ts-l Subscribe
Catalyst 2960xr-48fpd-i Subscribe
Catalyst 2960xr-48fpd-l Subscribe
Catalyst 2960xr-48fps-i Subscribe
Catalyst 2960xr-48fps-l Subscribe
Catalyst 2960xr-48lpd-i Subscribe
Catalyst 2960xr-48lpd-l Subscribe
Catalyst 2960xr-48lps-i Subscribe
Catalyst 2960xr-48lps-l Subscribe
Catalyst 2960xr-48td-i Subscribe
Catalyst 2960xr-48td-l Subscribe
Catalyst 2960xr-48ts-i Subscribe
Catalyst 2960xr-48ts-l Subscribe
Catalyst 2970g-24t Subscribe
Catalyst 2970g-24ts Subscribe
Catalyst 2975 Subscribe
Catalyst 3550 12g Subscribe
Catalyst 3550 12t Subscribe
Catalyst 3550 24 Dc Smi Subscribe
Catalyst 3550 24 Emi Subscribe
Catalyst 3550 24 Fx Smi Subscribe
Catalyst 3550 24 Pwr Subscribe
Catalyst 3550 24 Smi Subscribe
Catalyst 3550 48 Emi Subscribe
Catalyst 3550 48 Smi Subscribe
Catalyst 3560-12pc-s Subscribe
Catalyst 3560-24ps Subscribe
Catalyst 3560-24ts Subscribe
Catalyst 3560-48ps Subscribe
Catalyst 3560-48ts Subscribe
Catalyst 3560-8pc Subscribe
Catalyst 3560c-12pc-s Subscribe
Catalyst 3560c-8pc-s Subscribe
Catalyst 3560cg-8pc-s Subscribe
Catalyst 3560cg-8tc-s Subscribe
Catalyst 3560cpd-8pt-s Subscribe
Catalyst 3560cx-12pc-s Subscribe
Catalyst 3560cx-12pd-s Subscribe
Catalyst 3560cx-12tc-s Subscribe
Catalyst 3560cx-8pc-s Subscribe
Catalyst 3560cx-8pt-s Subscribe
Catalyst 3560cx-8tc-s Subscribe
Catalyst 3560cx-8xpd-s Subscribe
Catalyst 3560e-12d-e Subscribe
Catalyst 3560e-12d-s Subscribe
Catalyst 3560e-12sd-e Subscribe
Catalyst 3560e-12sd-s Subscribe
Catalyst 3560e-24pd-e Subscribe
Catalyst 3560e-24pd-s Subscribe
Catalyst 3560e-24td-e Subscribe
Catalyst 3560e-24td-s Subscribe
Catalyst 3560e-48pd-e Subscribe
Catalyst 3560e-48pd-ef Subscribe
Catalyst 3560e-48pd-s Subscribe
Catalyst 3560e-48pd-sf Subscribe
Catalyst 3560e-48td-e Subscribe
Catalyst 3560e-48td-s Subscribe
Catalyst 3560g-24ps Subscribe
Catalyst 3560g-24ts Subscribe
Catalyst 3560g-48ps Subscribe
Catalyst 3560g-48ts Subscribe
Catalyst 3560v2-24dc Subscribe
Catalyst 3560v2-24ps Subscribe
Catalyst 3560v2-24ts Subscribe
Catalyst 3560v2-48ps Subscribe
Catalyst 3560v2-48ts Subscribe
Catalyst 3560x-24p-e Subscribe
Catalyst 3560x-24p-l Subscribe
Catalyst 3560x-24p-s Subscribe
Catalyst 3560x-24t-e Subscribe
Catalyst 3560x-24t-l Subscribe
Catalyst 3560x-24t-s Subscribe
Catalyst 3560x-24u-e Subscribe
Catalyst 3560x-24u-l Subscribe
Catalyst 3560x-24u-s Subscribe
Catalyst 3560x-48p-e Subscribe
Catalyst 3560x-48p-l Subscribe
Catalyst 3560x-48p-s Subscribe
Catalyst 3560x-48pf-e Subscribe
Catalyst 3560x-48pf-l Subscribe
Catalyst 3560x-48pf-s Subscribe
Catalyst 3560x-48t-e Subscribe
Catalyst 3560x-48t-l Subscribe
Catalyst 3560x-48t-s Subscribe
Catalyst 3560x-48u-e Subscribe
Catalyst 3560x-48u-l Subscribe
Catalyst 3560x-48u-s Subscribe
Catalyst 3750-24fs Subscribe
Catalyst 3750-24ps Subscribe
Catalyst 3750-24ts Subscribe
Catalyst 3750-48ps Subscribe
Catalyst 3750-48ts Subscribe
Catalyst 3750 Metro 24-ac Subscribe
Catalyst 3750 Metro 24-dc Subscribe
Catalyst 3750e-24pd-e Subscribe
Catalyst 3750e-24pd-s Subscribe
Catalyst 3750e-24td-e Subscribe
Catalyst 3750e-24td-s Subscribe
Catalyst 3750e-48pd-e Subscribe
Catalyst 3750e-48pd-ef Subscribe
Catalyst 3750e-48pd-s Subscribe
Catalyst 3750e-48pd-sf Subscribe
Catalyst 3750e-48td-e Subscribe
Catalyst 3750e-48td-s Subscribe
Catalyst 3750g-12s Subscribe
Catalyst 3750g-12s-sd Subscribe
Catalyst 3750g-16td Subscribe
Catalyst 3750g-24ps Subscribe
Catalyst 3750g-24t Subscribe
Catalyst 3750g-24ts Subscribe
Catalyst 3750g-24ts-1u Subscribe
Catalyst 3750g-48ps Subscribe
Catalyst 3750g-48ts Subscribe
Catalyst 3750v2-24fs Subscribe
Catalyst 3750v2-24ps Subscribe
Catalyst 3750v2-24ts Subscribe
Catalyst 3750v2-48ps Subscribe
Catalyst 3750v2-48ts Subscribe
Catalyst 3750x-12s-e Subscribe
Catalyst 3750x-12s-s Subscribe
Catalyst 3750x-24p-e Subscribe
Catalyst 3750x-24p-l Subscribe
Catalyst 3750x-24p-s Subscribe
Catalyst 3750x-24s-e Subscribe
Catalyst 3750x-24s-s Subscribe
Catalyst 3750x-24t-e Subscribe
Catalyst 3750x-24t-l Subscribe
Catalyst 3750x-24t-s Subscribe
Catalyst 3750x-24u-e Subscribe
Catalyst 3750x-24u-l Subscribe
Catalyst 3750x-24u-s Subscribe
Catalyst 3750x-48p-e Subscribe
Catalyst 3750x-48p-l Subscribe
Catalyst 3750x-48p-s Subscribe
Catalyst 3750x-48pf-e Subscribe
Catalyst 3750x-48pf-l Subscribe
Catalyst 3750x-48pf-s Subscribe
Catalyst 3750x-48t-e Subscribe
Catalyst 3750x-48t-l Subscribe
Catalyst 3750x-48t-s Subscribe
Catalyst 3750x-48u-e Subscribe
Catalyst 3750x-48u-l Subscribe
Catalyst 3750x-48u-s Subscribe
Catalyst 4000 Supervisor Engine I Subscribe
Catalyst 4000 Supervisor Engine Iv Subscribe
Catalyst 4000 Supervisor Engine V Subscribe
Catalyst 4500 Supervisor Engine 6-e Subscribe
Catalyst 4500 Supervisor Engine 6l-e Subscribe
Catalyst 4500 Supervisor Engine Ii-plus Subscribe
Catalyst 4500 Supervisor Engine Ii-plus-ts Subscribe
Catalyst 4500 Supervisor Engine Iv Subscribe
Catalyst 4500 Supervisor Engine V Subscribe
Catalyst 4500 Supervisor Engine V-10ge Subscribe
Catalyst 4500 Supervisor Ii-plus-10ge Subscribe
Catalyst 4500e Supervisor Engine 8-e Subscribe
Catalyst 4900m Subscribe
Catalyst 4928 10 Gigabit Ethernet Switch Subscribe
Catalyst 4948 Subscribe
Catalyst 4948 10 Gigabit Ethernet Switch Subscribe
Catalyst 4948e-f Ethernet Switch Subscribe
Catalyst 4948e Ethernet Switch Subscribe
Catalyst Blade Switch 3020 Subscribe
Catalyst Blade Switch 3030 Subscribe
Catalyst Blade Switch 3032 Subscribe
Catalyst Blade Switch 3040 Subscribe
Catalyst Blade Switch 3120 Subscribe
Catalyst Blade Switch 3120x Subscribe
Catalyst Blade Switch 3130 Subscribe
Catalyst C2928-24lt-c Subscribe
Catalyst C2928-48tc-c Subscribe
Catalyst Switch Module 3012 Subscribe
Catalyst Switch Module 3110 Subscribe
Catalyst Switch Module 3110x Subscribe
Embedded Service 2020 24tc Con Subscribe
Embedded Service 2020 24tc Con B Subscribe
Embedded Service 2020 24tc Ncp Subscribe
Embedded Service 2020 24tc Ncp B Subscribe
Embedded Service 2020 Con Subscribe
Embedded Service 2020 Con B Subscribe
Embedded Service 2020 Ncp Subscribe
Embedded Service 2020 Ncp B Subscribe
Enhanced Layer 2\/3 Etherswitch Service Module Subscribe
Enhanced Layer 2 Etherswitch Service Module Subscribe
Gigabit Ethernet Switch Module \(cgesm\) Subscribe
Ie-3010-16s-8pc Industrial Ethernet Switch Subscribe
Ie-3010-24tc Industrial Ethernet Switch Subscribe
Ie-4000-16gt4g-e Industrial Ethernet Switch Subscribe
Ie-4000-16t4g-e Industrial Ethernet Switch Subscribe
Ie-4000-4gc4gp4g-e Industrial Ethernet Switch Subscribe
Ie-4000-4gs8gp4g-e Industrial Ethernet Switch Subscribe
Ie-4000-4s8p4g-e Industrial Ethernet Switch Subscribe
Ie-4000-4t4p4g-e Industrial Ethernet Switch Subscribe
Ie-4000-4tc4g-e Industrial Ethernet Switch Subscribe
Ie-4000-8gs4g-e Industrial Ethernet Switch Subscribe
Ie-4000-8gt4g-e Industrial Ethernet Switch Subscribe
Ie-4000-8gt8gp4g-e Industrial Ethernet Switch Subscribe
Ie-4000-8s4g-e Industrial Ethernet Switch Subscribe
Ie-4000-8t4g-e Industrial Ethernet Switch Subscribe
Ie-4010-16s12p Industrial Ethernet Switch Subscribe
Ie-4010-4s24p Industrial Ethernet Switch Subscribe
Ie-5000-12s12p-10g Industrial Ethernet Switch Subscribe
Ie-5000-16s12p Industrial Ethernet Switch Subscribe
Ie 2000-16ptc-g Industrial Ethernet Switch Subscribe
Ie 2000-16t67 Industrial Ethernet Switch Subscribe
Ie 2000-16t67p Industrial Ethernet Switch Subscribe
Ie 2000-16tc-g-e Industrial Ethernet Switch Subscribe
Ie 2000-16tc-g-n Industrial Ethernet Switch Subscribe
Ie 2000-16tc-g-x Industrial Ethernet Switch Subscribe
Ie 2000-16tc-g Industrial Ethernet Switch Subscribe
Ie 2000-16tc Industrial Ethernet Switch Subscribe
Ie 2000-24t67 Industrial Ethernet Switch Subscribe
Ie 2000-4s-ts-g Industrial Ethernet Switch Subscribe
Ie 2000-4t-g Industrial Ethernet Switch Subscribe
Ie 2000-4t Industrial Ethernet Switch Subscribe
Ie 2000-4ts-g Industrial Ethernet Switch Subscribe
Ie 2000-4ts Industrial Ethernet Switch Subscribe
Ie 2000-8t67 Industrial Ethernet Switch Subscribe
Ie 2000-8t67p Industrial Ethernet Switch Subscribe
Ie 2000-8tc-g-e Industrial Ethernet Switch Subscribe
Ie 2000-8tc-g-n Industrial Ethernet Switch Subscribe
Ie 2000-8tc-g Industrial Ethernet Switch Subscribe
Ie 2000-8tc Industrial Ethernet Switch Subscribe
Ie 3000-4tc Industrial Ethernet Switch Subscribe
Ie 3000-8tc Industrial Ethernet Switch Subscribe
Me 4924-10ge Subscribe
Rf Gateway 10 Subscribe
Sm-x Layer 2\/3 Etherswitch Service Module Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 22 Oct 2025 00:30:00 +0000


Tue, 21 Oct 2025 20:30:00 +0000


Tue, 21 Oct 2025 19:30:00 +0000


Fri, 15 Nov 2024 18:15:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-03-25'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2026-01-12T20:45:44.634Z

Reserved: 2016-12-21T00:00:00.000Z

Link: CVE-2017-3881

cve-icon Vulnrichment

Updated: 2024-08-05T14:39:41.294Z

cve-icon NVD

Status : Deferred

Published: 2017-03-17T22:59:00.640

Modified: 2026-01-12T21:15:51.593

Link: CVE-2017-3881

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses