CVE-2017-3805
A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the device. Affected Products: This vulnerability affects Cisco IOS Software and Cisco IOx Software running on IR829, IR809, IE4K, and CGR1K platforms. More Information: CSCvb20897. Known Affected Releases: 1.0(0).
- Score
- CVSS 3.0 5.3 Medium
- Status
- Modified - psirt@cisco.com
- Published
- 2017-01-26
- Last modified
- 2024-08-05
- Weaknesses
- CWE-200
Affected products
References
- http://www.securityfocus.com/bid/95644
- http://www.securitytracker.com/id/1037654
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-ios