7.1

CVE-2017-3812

EPSS 0.69%
Veröffentlicht 03.02.2017 07:59:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

A vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to a system memory leak. More Information: CSCvc54788. Known Affected Releases: 15.2(5.4.32i)E2. Known Fixed Releases: 15.2(5.4.62i)E2.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Industrial Ethernet 2000 Series Firmware Version <= 15.2\(5.4.32i\)e2

   Cisco ≫ Industrial Ethernet 2000 16ptc-g-e Switch Version-
   Cisco ≫ Industrial Ethernet 2000 16ptc-g-l Switch Version-
   Cisco ≫ Industrial Ethernet 2000 16ptc-g-nx Switch Version-
   Cisco ≫ Industrial Ethernet 2000 16t67-b Switch Version-
   Cisco ≫ Industrial Ethernet 2000 16t67p-g-e Switch Version-
   Cisco ≫ Industrial Ethernet 2000 16tc-g-e Switch Version-
   Cisco ≫ Industrial Ethernet 2000 16tc-g-l Switch Version-
   Cisco ≫ Industrial Ethernet 2000 16tc-g-n Switch Version-
   Cisco ≫ Industrial Ethernet 2000 16tc-g-x Switch Version-
   Cisco ≫ Industrial Ethernet 2000 16tc-l Switch Version-
   Cisco ≫ Industrial Ethernet 2000 24t67-b Switch Version-
   Cisco ≫ Industrial Ethernet 2000 4s-ts-g-b Switch Version-
   Cisco ≫ Industrial Ethernet 2000 4s-ts-g-l Switch Version-
   Cisco ≫ Industrial Ethernet 2000 4t-b Switch Version-
   Cisco ≫ Industrial Ethernet 2000 4t-g-b Switch Version-
   Cisco ≫ Industrial Ethernet 2000 4t-g-l Switch Version-
   Cisco ≫ Industrial Ethernet 2000 4t-l Switch Version-
   Cisco ≫ Industrial Ethernet 2000 4ts-b Switch Version-
   Cisco ≫ Industrial Ethernet 2000 4ts-g-b Switch Version-
   Cisco ≫ Industrial Ethernet 2000 4ts-g-l Switch Version-
   Cisco ≫ Industrial Ethernet 2000 4ts-l Switch Version-
   Cisco ≫ Industrial Ethernet 2000 8t67-b Switch Version-
   Cisco ≫ Industrial Ethernet 2000 8t67p-g-e Switch Version-
   Cisco ≫ Industrial Ethernet 2000 8tc-b Switch Version-
   Cisco ≫ Industrial Ethernet 2000 8tc-g-b Switch Version-
   Cisco ≫ Industrial Ethernet 2000 8tc-g-e Switch Version-
   Cisco ≫ Industrial Ethernet 2000 8tc-g-l Switch Version-
   Cisco ≫ Industrial Ethernet 2000 8tc-g-n Switch Version-
   Cisco ≫ Industrial Ethernet 2000 8tc-l Switch Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.69%	0.693

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	2.2	4	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
nvd@nist.gov	7.1	8.6	6.9	AV:N/AC:M/Au:N/C:N/I:N/A:C

CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

http://www.securityfocus.com/bid/95946

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1037771

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-psc1

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-3812

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-3812

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-3812

EUVD