Not rated
CVE-2017-3876 A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated,…
Description
A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this vulnerability by repeatedly sending unauthenticated gRPC requests to the affected device. A successful exploit could allow the attacker to crash the device in such a manner that manual intervention is required to recover. This vulnerability affects all Cisco IOS XR platforms that are running release 6.1.1 of Cisco IOS XR Software when the gRPC service is enabled on the device. The gRPC service is not enabled by default. Cisco Bug IDs: CSCvb14441.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IOS XR | Versions not published |
References
- 98284 www.securityfocus.com
- tools.cisco.com tools.cisco.com
- 1038393 www.securitytracker.com
Timeline
- Published
- Last modified
Other CVEs of Cisco IOS XR
The 12 CVEs of Cisco IOS XR →
CVE-2018-0286
A vulnerability in the netconf interface of Cisco IOS XR Software could allow an unauthenticated, remote attacker to…
Not rated
CVE-2018-0241
A vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an unauthenticated,…
Not rated
CVE-2018-0132
A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated,…
Not rated
CVE-2017-12355
A vulnerability in the Local Packet Transport Services (LPTS) ingress frame-processing functionality of Cisco IOS XR…
Not rated