Vulnerability identifier: #VU6159

Vulnerability risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2017-3850

CWE-ID: CWE-20

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Cisco IOS XE
Operating systems & Components / Operating system
Cisco IOS
Operating systems & Components / Operating system

Vendor: Cisco Systems, Inc

Description
The vulnerability allows a remote attacker to cause DoS conditions.

The vulnerability exists in Autonomic Networking Infrastructure (ANI) registrar feature due to incomplete input validation . An attacker can send a specially crafted IPv6 packet and cause the affected device to reload.

Successful exploitation of the vulnerability results in denial of service on the vulnerable device.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Cisco IOS XE: 3.7 - 3.18

Cisco IOS: 15.2E - 15.6T

---

External links
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170320-aniipv6

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.