Test ID:	1.3.6.1.4.1.25623.1.0.106670
Category:	CISCO
Title:	Cisco IOS Software Cluster Management Protocol Remote Code Execution Vulnerability
Summary:	A vulnerability in the Cisco Cluster Management Protocol (CMP) processing;code in Cisco IOS Software could allow an unauthenticated, remote attacker to cause a reload of an affected;device or remotely execute code with elevated privileges.
Description:	Summary: A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. Vulnerability Insight: The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: - The failure to restrict the use of CMP-specific Telnet options only to internal, local communications between cluster members and instead accept and process such options over any Telnet connection to an affected device, and - The incorrect processing of malformed CMP-specific Telnet options. An attacker could exploit this vulnerability by sending malformed CMP-specific Telnet options while establishing a Telnet session with an affected Cisco device configured to accept Telnet connections. Vulnerability Impact: An exploit could allow an attacker to execute arbitrary code and obtain full control of the device or cause a reload of the affected device. Solution: See the referenced vendor advisory for a solution. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-3881 BugTraq ID: 96960 http://www.securityfocus.com/bid/96960 BugTraq ID: 97391 http://www.securityfocus.com/bid/97391 https://www.exploit-db.com/exploits/41872/ https://www.exploit-db.com/exploits/41874/ http://www.securitytracker.com/id/1038059
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.