Lucene search
CiscoCISCO-SA-20170419-ENERGYWISEHistoryApr 19, 2017 - 4:00 p.m.
Cisco IOS and IOS XE Software EnergyWise Denial of Service Vulnerabilities
2017-04-1916:00:00
tools.cisco.com
25
EPSS
0.004
Percentile
72.1%
Multiple vulnerabilities in the EnergyWise module of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service (DoS) condition.
These vulnerabilities are due to improper parsing of crafted EnergyWise packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed by an affected device. An exploit could allow the attacker to cause a buffer overflow condition or a reload of the affected device, leading to a DoS condition.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywise [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywise”]
Affected configurations
Node
ciscoiosMatch12.2se
ORciscoiosMatch12.2ex
ORciscoiosMatch12.2ey
ORciscoiosMatch12.2ez
ORciscoiosMatch15.0xo
ORciscoiosMatch15.0ey
ORciscoiosMatch15.0se
ORciscoiosMatch15.0sy
ORciscoiosMatch12.2sxj
ORciscoiosMatch15.1sg
ORciscoiosMatch15.0sg
ORciscoiosMatch15.0ex
ORciscoiosMatch15.1sy
ORciscoiosMatch15.2e
ORciscoiosMatch15.0ez
ORciscoiosMatch15.2sc
ORciscoiosMatch15.0ej
ORciscoiosMatch15.2sy
ORciscoiosMatch15.0ek
ORciscoiosMatch15.5s
ORciscoiosMatch15.2eb
ORciscoiosMatch15.2ea
ORciscoiosMatch15.0sqd
ORciscoiosMatch15.3sy
ORciscoiosMatch15.4sy
ORciscoiosMatch15.5sy
ORciscocisco_ios_xe_softwareMatch3.2sg
ORciscocisco_ios_xe_softwareMatch3.7s
ORciscocisco_ios_xe_softwareMatch3.3sg
ORciscocisco_ios_xe_softwareMatch3.3xo
ORciscocisco_ios_xe_softwareMatch3.4sg
ORciscocisco_ios_xe_softwareMatch3.5e
ORciscocisco_ios_xe_softwareMatch3.10s
ORciscocisco_ios_xe_softwareMatch3.12s
ORciscocisco_ios_xe_softwareMatch3.6e
ORciscocisco_ios_xe_softwareMatch3.3sq
ORciscocisco_ios_xe_softwareMatch3.4sq
ORciscocisco_ios_xe_softwareMatch3.7e
ORciscocisco_ios_xe_softwareMatch3.5sq
ORciscocisco_ios_xe_softwareMatch3.16s
ORciscocisco_ios_xe_softwareMatch16.1
ORciscocisco_ios_xe_softwareMatch16.2
ORciscocisco_ios_xe_softwareMatch3.8e
ORciscocisco_ios_xe_softwareMatch3.18sp
ORciscoiosMatch12.2\(55\)se
ORciscoiosMatch12.2\(55\)se3
ORciscoiosMatch12.2\(55\)se2
ORciscoiosMatch12.2\(58\)se
ORciscoiosMatch12.2\(55\)se1
ORciscoiosMatch12.2\(58\)se1
ORciscoiosMatch12.2\(55\)se4
ORciscoiosMatch12.2\(58\)se2
ORciscoiosMatch12.2\(55\)se5
ORciscoiosMatch12.2\(55\)se6
ORciscoiosMatch12.2\(55\)se7
ORciscoiosMatch12.2\(55\)se8
ORciscoiosMatch12.2\(55\)se9
ORciscoiosMatch12.2\(55\)se10
ORciscoiosMatch12.2\(55\)se11
ORciscoiosMatch12.2\(55\)se12
ORciscoiosMatch12.2\(55\)ex
ORciscoiosMatch12.2\(55\)ex1
ORciscoiosMatch12.2\(55\)ex2
ORciscoiosMatch12.2\(55\)ex3
ORciscoiosMatch12.2\(58\)ex
ORciscoiosMatch12.2\(55\)ey
ORciscoiosMatch12.2\(58\)ey
ORciscoiosMatch12.2\(58\)ey1
ORciscoiosMatch12.2\(58\)ey2
ORciscoiosMatch12.2\(58\)ez
ORciscoiosMatch12.2\(55\)ez
ORciscoiosMatch12.2\(60\)ez
ORciscoiosMatch12.2\(60\)ez1
ORciscoiosMatch12.2\(60\)ez2
ORciscoiosMatch12.2\(60\)ez3
ORciscoiosMatch12.2\(60\)ez4
ORciscoiosMatch12.2\(60\)ez5
ORciscoiosMatch12.2\(60\)ez6
ORciscoiosMatch12.2\(60\)ez7
ORciscoiosMatch12.2\(60\)ez8
ORciscoiosMatch12.2\(60\)ez9
ORciscoiosMatch12.2\(60\)ez10
ORciscoiosMatch12.2\(60\)ez11
ORciscoiosMatch12.2\(60\)ez13
ORciscoiosMatch15.0\(2\)xo
ORciscoiosMatch15.0\(1\)ey
ORciscoiosMatch15.0\(1\)ey2
ORciscoiosMatch15.0\(1\)se
ORciscoiosMatch15.0\(2\)se
ORciscoiosMatch15.0\(1\)se1
ORciscoiosMatch15.0\(1\)se2
ORciscoiosMatch15.0\(1\)se3
ORciscoiosMatch15.0\(2\)se1
ORciscoiosMatch15.0\(2\)se2
ORciscoiosMatch15.0\(2\)se3
ORciscoiosMatch15.0\(2\)se4
ORciscoiosMatch15.0\(2\)se5
ORciscoiosMatch15.0\(2\)se6
ORciscoiosMatch15.0\(2\)se7
ORciscoiosMatch15.0\(2\)se8
ORciscoiosMatch15.0\(2\)se9
ORciscoiosMatch15.0\(2a\)se9
ORciscoiosMatch15.0\(2\)se10
ORciscoiosMatch15.0\(2\)se11
ORciscoiosMatch15.0\(2\)se10a
ORciscoiosMatch15.0\(1\)sy1
ORciscoiosMatch15.0\(1\)sy2
ORciscoiosMatch15.0\(1\)sy3
ORciscoiosMatch15.0\(1\)sy4
ORciscoiosMatch15.0\(1\)sy5
ORciscoiosMatch15.0\(1\)sy6
ORciscoiosMatch15.0\(1\)sy7
ORciscoiosMatch15.0\(1\)sy8
ORciscoiosMatch15.0\(1\)sy7a
ORciscoiosMatch15.0\(1\)sy9
ORciscoiosMatch15.0\(1\)sy10
ORciscoiosMatch12.2\(33\)sxj
ORciscoiosMatch12.2\(33\)sxj1
ORciscoiosMatch12.2\(33\)sxj2
ORciscoiosMatch12.2\(33\)sxj3
ORciscoiosMatch12.2\(33\)sxj4
ORciscoiosMatch12.2\(33\)sxj5
ORciscoiosMatch12.2\(33\)sxj6
ORciscoiosMatch12.2\(33\)sxj7
ORciscoiosMatch12.2\(33\)sxj8
ORciscoiosMatch12.2\(33\)sxj9
ORciscoiosMatch12.2\(33\)sxj10
ORciscoiosMatch15.1\(1\)sg
ORciscoiosMatch15.1\(2\)sg
ORciscoiosMatch15.1\(1\)sg1
ORciscoiosMatch15.1\(1\)sg2
ORciscoiosMatch15.1\(2\)sg1
ORciscoiosMatch15.1\(2\)sg2
ORciscoiosMatch15.1\(2\)sg3
ORciscoiosMatch15.1\(2\)sg4
ORciscoiosMatch15.1\(2\)sg5
ORciscoiosMatch15.1\(2\)sg6
ORciscoiosMatch15.1\(2\)sg7
ORciscoiosMatch15.1\(2\)sg8
ORciscoiosMatch15.0\(2\)sg
ORciscoiosMatch15.0\(2\)sg1
ORciscoiosMatch15.0\(2\)sg2
ORciscoiosMatch15.0\(2\)sg3
ORciscoiosMatch15.0\(2\)sg4
ORciscoiosMatch15.0\(2\)sg5
ORciscoiosMatch15.0\(2\)sg6
ORciscoiosMatch15.0\(2\)sg7
ORciscoiosMatch15.0\(2\)sg8
ORciscoiosMatch15.0\(2\)sg9
ORciscoiosMatch15.0\(2\)sg10
ORciscoiosMatch15.0\(2\)sg11
ORciscoiosMatch15.0\(2\)sg11a
ORciscoiosMatch15.0\(2\)ex
ORciscoiosMatch15.0\(2\)ex1
ORciscoiosMatch15.0\(2\)ex2
ORciscoiosMatch15.0\(2\)ex3
ORciscoiosMatch15.0\(2\)ex4
ORciscoiosMatch15.0\(2\)ex5
ORciscoiosMatch15.0\(2\)ex6
ORciscoiosMatch15.0\(2\)ex7
ORciscoiosMatch15.0\(2\)ex8
ORciscoiosMatch15.0\(2a\)ex5
ORciscoiosMatch15.0\(2\)ex10
ORciscoiosMatch15.0\(2\)ex11
ORciscoiosMatch15.0\(2\)ex13
ORciscoiosMatch15.0\(2\)ex12
ORciscoiosMatch15.1\(1\)sy
ORciscoiosMatch15.1\(1\)sy1
ORciscoiosMatch15.1\(2\)sy
ORciscoiosMatch15.1\(2\)sy1
ORciscoiosMatch15.1\(2\)sy2
ORciscoiosMatch15.1\(1\)sy2
ORciscoiosMatch15.1\(1\)sy3
ORciscoiosMatch15.1\(2\)sy3
ORciscoiosMatch15.1\(1\)sy4
ORciscoiosMatch15.1\(2\)sy4
ORciscoiosMatch15.1\(1\)sy5
ORciscoiosMatch15.1\(2\)sy5
ORciscoiosMatch15.1\(2\)sy4a
ORciscoiosMatch15.1\(1\)sy6
ORciscoiosMatch15.1\(2\)sy6
ORciscoiosMatch15.1\(2\)sy7
ORciscoiosMatch15.1\(2\)sy8
ORciscoiosMatch15.1\(2\)sy9
ORciscoiosMatch15.1\(2\)sy10
ORciscoiosMatch15.1\(2\)sy11
ORciscoiosMatch15.2\(1\)e
ORciscoiosMatch15.2\(2\)e
ORciscoiosMatch15.2\(1\)e1
ORciscoiosMatch15.2\(3\)e
ORciscoiosMatch15.2\(1\)e2
ORciscoiosMatch15.2\(1\)e3
ORciscoiosMatch15.2\(2\)e1
ORciscoiosMatch15.2\(2b\)e
ORciscoiosMatch15.2\(4\)e
ORciscoiosMatch15.2\(3\)e1
ORciscoiosMatch15.2\(2\)e2
ORciscoiosMatch15.2\(2a\)e1
ORciscoiosMatch15.2\(2\)e3
ORciscoiosMatch15.2\(2a\)e2
ORciscoiosMatch15.2\(3\)e2
ORciscoiosMatch15.2\(3a\)e
ORciscoiosMatch15.2\(3\)e3
ORciscoiosMatch15.2\(3m\)e2
ORciscoiosMatch15.2\(2\)e4
ORciscoiosMatch15.2\(2\)e5
ORciscoiosMatch15.2\(3m\)e7
ORciscoiosMatch15.2\(2\)e6
ORciscoiosMatch15.2\(3m\)e8
ORciscoiosMatch15.2\(2\)e5a
ORciscoiosMatch15.2\(2\)e5b
ORciscoiosMatch15.0\(2\)ez
ORciscoiosMatch15.2\(2\)sc3
ORciscoiosMatch15.0\(2\)ej
ORciscoiosMatch15.0\(2\)ej1
ORciscoiosMatch15.2\(1\)sy
ORciscoiosMatch15.2\(1\)sy1
ORciscoiosMatch15.2\(1\)sy0a
ORciscoiosMatch15.2\(1\)sy2
ORciscoiosMatch15.2\(2\)sy
ORciscoiosMatch15.2\(1\)sy1a
ORciscoiosMatch15.2\(2\)sy1
ORciscoiosMatch15.2\(2\)sy2
ORciscoiosMatch15.2\(1\)sy3
ORciscoiosMatch15.2\(1\)sy4
ORciscoiosMatch15.2\(2\)sy3
ORciscoiosMatch15.2\(1\)sy5
ORciscoiosMatch15.2\(1\)sy6
ORciscoiosMatch15.0\(2\)ek
ORciscoiosMatch15.0\(2\)ek1
ORciscoiosMatch15.5\(3\)s10c
ORciscoiosMatch15.2\(2\)eb
ORciscoiosMatch15.2\(2\)eb1
ORciscoiosMatch15.2\(2\)eb2
ORciscoiosMatch15.2\(2\)ea
ORciscoiosMatch15.2\(2\)ea1
ORciscoiosMatch15.2\(2\)ea2
ORciscoiosMatch15.2\(3\)ea
ORciscoiosMatch15.2\(4\)ea
ORciscoiosMatch15.2\(2\)ea3
ORciscoiosMatch15.0\(2\)sqd
ORciscoiosMatch15.0\(2\)sqd1
ORciscoiosMatch15.0\(2\)sqd2
ORciscoiosMatch15.0\(2\)sqd3
ORciscoiosMatch15.0\(2\)sqd4
ORciscoiosMatch15.0\(2\)sqd5
ORciscoiosMatch15.0\(2\)sqd6
ORciscoiosMatch15.0\(2\)sqd7
ORciscoiosMatch15.3\(1\)sy
ORciscoiosMatch15.3\(0\)sy
ORciscoiosMatch15.3\(1\)sy1
ORciscoiosMatch15.3\(1\)sy2
ORciscoiosMatch15.4\(1\)sy
ORciscoiosMatch15.4\(1\)sy1
ORciscoiosMatch15.4\(1\)sy2
ORciscoiosMatch15.4\(1\)sy3
ORciscoiosMatch15.4\(1\)sy4
ORciscoiosMatch15.5\(1\)sy
ORciscoiosMatch15.5\(1\)sy1
ORciscocisco_ios_xe_softwareMatch3.2.0sg
ORciscocisco_ios_xe_softwareMatch3.2.1sg
ORciscocisco_ios_xe_softwareMatch3.2.2sg
ORciscocisco_ios_xe_softwareMatch3.2.3sg
ORciscocisco_ios_xe_softwareMatch3.2.4sg
ORciscocisco_ios_xe_softwareMatch3.2.5sg
ORciscocisco_ios_xe_softwareMatch3.2.6sg
ORciscocisco_ios_xe_softwareMatch3.2.7sg
ORciscocisco_ios_xe_softwareMatch3.2.8sg
ORciscocisco_ios_xe_softwareMatch3.2.9sg
ORciscocisco_ios_xe_softwareMatch3.2.10sg
ORciscocisco_ios_xe_softwareMatch3.2.11sg
ORciscocisco_ios_xe_softwareMatch3.7.7s
ORciscocisco_ios_xe_softwareMatch3.3.0sg
ORciscocisco_ios_xe_softwareMatch3.3.2sg
ORciscocisco_ios_xe_softwareMatch3.3.1sg
ORciscocisco_ios_xe_softwareMatch3.3.0xo
ORciscocisco_ios_xe_softwareMatch3.3.1xo
ORciscocisco_ios_xe_softwareMatch3.3.2xo
ORciscocisco_ios_xe_softwareMatch3.4.0sg
ORciscocisco_ios_xe_softwareMatch3.4.2sg
ORciscocisco_ios_xe_softwareMatch3.4.1sg
ORciscocisco_ios_xe_softwareMatch3.4.3sg
ORciscocisco_ios_xe_softwareMatch3.4.4sg
ORciscocisco_ios_xe_softwareMatch3.4.5sg
ORciscocisco_ios_xe_softwareMatch3.4.6sg
ORciscocisco_ios_xe_softwareMatch3.4.7sg
ORciscocisco_ios_xe_softwareMatch3.4.8sg
ORciscocisco_ios_xe_softwareMatch3.5.0e
ORciscocisco_ios_xe_softwareMatch3.5.1e
ORciscocisco_ios_xe_softwareMatch3.5.2e
ORciscocisco_ios_xe_softwareMatch3.5.3e
ORciscocisco_ios_xe_softwareMatch3.10.4s
ORciscocisco_ios_xe_softwareMatch3.12.0as
ORciscocisco_ios_xe_softwareMatch3.6.0e
ORciscocisco_ios_xe_softwareMatch3.6.1e
ORciscocisco_ios_xe_softwareMatch3.6.0ae
ORciscocisco_ios_xe_softwareMatch3.6.0be
ORciscocisco_ios_xe_softwareMatch3.6.2ae
ORciscocisco_ios_xe_softwareMatch3.6.2e
ORciscocisco_ios_xe_softwareMatch3.6.3e
ORciscocisco_ios_xe_softwareMatch3.6.4e
ORciscocisco_ios_xe_softwareMatch3.6.5e
ORciscocisco_ios_xe_softwareMatch3.6.6e
ORciscocisco_ios_xe_softwareMatch3.6.5ae
ORciscocisco_ios_xe_softwareMatch3.6.5be
ORciscocisco_ios_xe_softwareMatch3.3.0sq
ORciscocisco_ios_xe_softwareMatch3.3.1sq
ORciscocisco_ios_xe_softwareMatch3.4.0sq
ORciscocisco_ios_xe_softwareMatch3.4.1sq
ORciscocisco_ios_xe_softwareMatch3.7.0e
ORciscocisco_ios_xe_softwareMatch3.7.1e
ORciscocisco_ios_xe_softwareMatch3.7.2e
ORciscocisco_ios_xe_softwareMatch3.7.3e
ORciscocisco_ios_xe_softwareMatch3.5.0sq
ORciscocisco_ios_xe_softwareMatch3.5.1sq
ORciscocisco_ios_xe_softwareMatch3.5.2sq
ORciscocisco_ios_xe_softwareMatch3.5.3sq
ORciscocisco_ios_xe_softwareMatch3.5.4sq
ORciscocisco_ios_xe_softwareMatch3.5.5sq
ORciscocisco_ios_xe_softwareMatch3.5.6sq
ORciscocisco_ios_xe_softwareMatch3.5.7sq
ORciscocisco_ios_xe_softwareMatch3.16.1s
ORciscocisco_ios_xe_softwareMatch3.16.0bs
ORciscocisco_ios_xe_softwareMatch16.1.1
ORciscocisco_ios_xe_softwareMatch16.1.2
ORciscocisco_ios_xe_softwareMatch16.1.3
ORciscocisco_ios_xe_softwareMatch16.2.1
ORciscocisco_ios_xe_softwareMatch16.2.2
ORciscocisco_ios_xe_softwareMatch3.8.0e
ORciscocisco_ios_xe_softwareMatch3.18.0sp
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | ios | 12.2se | cpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:* |
| cisco | ios | 12.2ex | cpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:* |
| cisco | ios | 12.2ey | cpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:* |
| cisco | ios | 12.2ez | cpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:* |
| cisco | ios | 15.0xo | cpe:2.3:o:cisco:ios:15.0xo:*:*:*:*:*:*:* |
| cisco | ios | 15.0ey | cpe:2.3:o:cisco:ios:15.0ey:*:*:*:*:*:*:* |
| cisco | ios | 15.0se | cpe:2.3:o:cisco:ios:15.0se:*:*:*:*:*:*:* |
| cisco | ios | 15.0sy | cpe:2.3:o:cisco:ios:15.0sy:*:*:*:*:*:*:* |
| cisco | ios | 12.2sxj | cpe:2.3:o:cisco:ios:12.2sxj:*:*:*:*:*:*:* |
| cisco | ios | 15.1sg | cpe:2.3:o:cisco:ios:15.1sg:*:*:*:*:*:*:* |
Related
openvas
openvas
Cisco IOS Software EnergyWise Denial of Service Vulnerabilities
2017-04-20 00:00:00
Cisco IOS XE Software EnergyWise Denial of Service Vulnerabilities
2017-04-20 00:00:00
nessus
nessus
Cisco IOS XE EnergyWise DoS (cisco-sa-20170419-energywise)
2017-04-26 00:00:00
Cisco IOS EnergyWise DoS (cisco-sa-20170419-energywise)
2017-04-26 00:00:00
nvd
nvd
cve
cve
prion
prion
Buffer overflow
2017-04-20 22:59:00
Buffer overflow
2017-04-20 22:59:00
Buffer overflow
2017-04-20 22:59:00
cvelist
cvelist