Denial of Service Vulnerability in Cisco Nexus 9000 Series Switches

CVE-2017-3879

What is CVE-2017-3879?

A Denial of Service vulnerability exists in the remote login functionality of Cisco Nexus 9000 Series Switches running Cisco NX-OS Software. An unauthenticated remote attacker can exploit this flaw to cause the login process to terminate unexpectedly, resulting in failed login attempts. This attack can be conducted through either Telnet or SSH connections, allowing unauthorized access attempts. Despite the vulnerability, user traffic remains unaffected. Important versions affected include 7.0(3)I3(1), 8.3(0)CV(0.342), and 8.3(0)CV(0.345), and it is crucial for users to update to fixed software versions to mitigate this risk.

References