CVE-2017-3805 Information disclosure in Cisco IOS and Cisco IOx
Unauthenticated remote attackers can view confidential information via the web management interface of Cisco IOS and IOx devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-3805?
CVE-2017-3805 is a medium-severity vulnerability in Cisco IOS and Cisco IOx, published on 26 Jan 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the device. Affected Products: This vulnerability affects Cisco IOS Software and Cisco IOx Software running on IR829, IR809, IE4K, and CGR1K platforms. More Information: CSCvb20897. Known Affected Releases: 1.0(0).
Weakness: CWE-200
Which versions are affected by CVE-2017-3805?
It affects 1 product.
Products include Cisco Iox.
How do I fix CVE-2017-3805?
No fix has been published for CVE-2017-3805 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-3805 being exploited?
There is no known exploitation of CVE-2017-3805 in the wild and no public exploit code.
Other vulnerabilities in Cisco IOS and Cisco IOx
- CVE-2017-3853 Memory corruption in Cisco IOx
- CVE-2020-3238 Cisco IOx Application Framework Arbitrary File Creation Vulnerability
- CVE-2017-3852 Path traversal in Cisco Application-Hosting Framework
- CVE-2017-3851 Path traversal in Cisco Application-Hosting Framework
- CVE-2016-9199 Path traversal in Cisco IOx
Sources
Also known as GHSA-c6xp-2qqh-7vvr.