CVE-2017-3859

N/A

Published: March 22, 2017 at 07:00 PM UTC

Updated: June 17, 2026 at 01:19 AM UTC

9 products affected across 1 vendorIOS XeAsr 920-12Cz-DAsr 920-24Tz-M

Using Cisco IOS XE Software for Cisco ASR 920 Series Routers by N/A?

Get instant alerts when new vulnerabilities affect Cisco IOS XE Software for Cisco ASR 920 Series Routers - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 2%

Description

A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a format string vulnerability when processing a crafted DHCP packet for Zero Touch Provisioning. An attacker could exploit this vulnerability by sending a specially crafted DHCP packet to an affected device. An exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition. This vulnerability affects Cisco ASR 920 Series Aggregation Services Routers that are running an affected release of Cisco IOS XE Software (3.13 through 3.18) and are listening on the DHCP server port. By default, the devices do not listen on the DHCP server port. Cisco Bug IDs: CSCuy56385.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS Xe · Cisco

95%

cisco-asr-920-12cz-a (environment) · cisco-asr-920-12cz-d (environment) · cisco-asr-920-12sz-im (environment) · cisco-asr-920-24sz-im (environment) · cisco-asr-920-24sz-m (environment) · cisco-asr-920-24tz-m (environment) · cisco-asr-920-4sz-a (environment) · cisco-asr-920-4sz-d (environment)

Asr 920-12Cz-A · Ciscodevice

80%

All versions

Asr 920-12Cz-D · Ciscodevice

80%

All versions

Asr 920-12Sz-Im · Ciscodevice

80%

All versions

Asr 920-24Sz-Im · Ciscodevice

80%

All versions