2017年3月17日美国时间下午4点，Cisco官方网站发布Cisco IOS&IOS XE Software 集群管理协议(Cluster Management Protocol)存在远程代码执行漏洞。该漏洞目前为0day漏洞，危害等级高。该漏洞允许未授权访问,远程攻击者可以重启设备和远程执行代码提升权限。
Cisco IOS是Cisco的网际操作系统；是一个为网际互连优化的复杂的操作系统；也是一个与硬件分离的软件体系结构，随网络技术的不断发展，可动态地升级以适应不断变化的技术（软件）。
根据FOFA系统显示，目前全球共有超过43万个对外可以访问（仅为全球分布情况，非漏洞影响情况）。其中美国超过3分之一；中国使用量位列第二。该漏洞受影响设备达到319种型号。
Cisco IOS 全球分布（仅为全球分布情况，非漏洞影响情况）
Cisco IOS 全球分布 TOP 10（仅为全球分布情况，非漏洞影响情况）
Cisco IOS 中国分布（仅为全球分布情况，非漏洞影响情况）
Cisco IOS 中国行政区域分布 TOP 10（仅为全球分布情况，非漏洞影响情况）
漏洞原理与危害
集群管理协议（Cluster Management Protocol）是集群成员之间内部使用TELNET来进行信号和命令控制的协议。该漏洞是由两个因素构成:
未能限制使用CMP-specific Telnet选项只对内部,而是接受 Telnet连接到任何一个受影响的设备。CMP-specific Telnet的错误处理选项CMP-specific Telnet 选项是默认的，即使没有出现在设置的集群设置命令中。
攻击者可以利用此漏洞通过发送畸形CMP-specific Telnet选项，向受影响设备建立一个Telnet会话。漏洞可能允许远程攻击者执行任意代码,提升权限，完全控制受影响的设备或导致设备重启。
影响范围
暂无
漏洞POC
暂无
CVE编号
CVE-2017-3881
修复建议
用户可通过登录进入Cisco IOS系统，输入Show Version检查对应版本是否受影响。大致内容如下：
另外也可以打开官方网站进行版本检测，地址
修复方法
修改配置，设置Telnet允许指定IP可以连接或者不允许Telnet连接；目前官方还未发布补丁，请时刻关注Cisco官方发布的补丁和最新更新。漏洞影响
目前受该漏洞影响设备的版本如下：
Cisco Catalyst 2350-48TD-S SwitchCisco Catalyst 2350-48TD-SD SwitchCisco Catalyst 2360-48TD-S SwitchCisco Catalyst 2918-24TC-C SwitchCisco Catalyst 2918-24TT-C SwitchCisco Catalyst 2918-48TC-C SwitchCisco Catalyst 2918-48TT-C SwitchCisco Catalyst 2928-24TC-C SwitchCisco Catalyst 2960-24-S SwitchCisco Catalyst 2960-24LC-S SwitchCisco Catalyst 2960-24LT-L SwitchCisco Catalyst 2960-24PC-L SwitchCisco Catalyst 2960-24PC-S SwitchCisco Catalyst 2960-24TC-L SwitchCisco Catalyst 2960-24TC-S SwitchCisco Catalyst 2960-24TT-L SwitchCisco Catalyst 2960-48PST-L SwitchCisco Catalyst 2960-48PST-S SwitchCisco Catalyst 2960-48TC-L SwitchCisco Catalyst 2960-48TC-S SwitchCisco Catalyst 2960-48TT-L SwitchCisco Catalyst 2960-48TT-S SwitchCisco Catalyst 2960-8TC-L Compact SwitchCisco Catalyst 2960-8TC-S Compact SwitchCisco Catalyst 2960-Plus 24LC-L SwitchCisco Catalyst 2960-Plus 24LC-S SwitchCisco Catalyst 2960-Plus 24PC-L SwitchCisco Catalyst 2960-Plus 24PC-S SwitchCisco Catalyst 2960-Plus 24TC-L SwitchCisco Catalyst 2960-Plus 24TC-S SwitchCisco Catalyst 2960-Plus 48PST-L SwitchCisco Catalyst 2960-Plus 48PST-S SwitchCisco Catalyst 2960-Plus 48TC-L SwitchCisco Catalyst 2960-Plus 48TC-S SwitchCisco Catalyst 2960C-12PC-L SwitchCisco Catalyst 2960C-8PC-L SwitchCisco Catalyst 2960C-8TC-L SwitchCisco Catalyst 2960C-8TC-S SwitchCisco Catalyst 2960CG-8TC-L Compact SwitchCisco Catalyst 2960CPD-8PT-L SwitchCisco Catalyst 2960CPD-8TT-L SwitchCisco Catalyst 2960CX-8PC-L SwitchCisco Catalyst 2960CX-8TC-L SwitchCisco Catalyst 2960G-24TC-L SwitchCisco Catalyst 2960G-48TC-L SwitchCisco Catalyst 2960G-8TC-L Compact SwitchCisco Catalyst 2960L-16PS-LL SwitchCisco Catalyst 2960L-16TS-LL SwitchCisco Catalyst 2960L-24PS-LL SwitchCisco Catalyst 2960L-24TS-LL SwitchCisco Catalyst 2960L-48PS-LL SwitchCisco Catalyst 2960L-48TS-LL SwitchCisco Catalyst 2960L-8PS-LL SwitchCisco Catalyst 2960L-8TS-LL SwitchCisco Catalyst 2960PD-8TT-L Compact SwitchCisco Catalyst 2960S-24PD-L SwitchCisco Catalyst 2960S-24PS-L SwitchCisco Catalyst 2960S-24TD-L SwitchCisco Catalyst 2960S-24TS-L SwitchCisco Catalyst 2960S-24TS-S SwitchCisco Catalyst 2960S-48FPD-L SwitchCisco Catalyst 2960S-48FPS-L SwitchCisco Catalyst 2960S-48LPD-L SwitchCisco Catalyst 2960S-48LPS-L SwitchCisco Catalyst 2960S-48TD-L SwitchCisco Catalyst 2960S-48TS-L SwitchCisco Catalyst 2960S-48TS-S SwitchCisco Catalyst 2960S-F24PS-L SwitchCisco Catalyst 2960S-F24TS-L SwitchCisco Catalyst 2960S-F24TS-S SwitchCisco Catalyst 2960S-F48FPS-L SwitchCisco Catalyst 2960S-F48LPS-L SwitchCisco Catalyst 2960S-F48TS-L SwitchCisco Catalyst 2960S-F48TS-S SwitchCisco Catalyst 2960X-24PD-L SwitchCisco Catalyst 2960X-24PS-L SwitchCisco Catalyst 2960X-24PSQ-L Cool SwitchCisco Catalyst 2960X-24TD-L SwitchCisco Catalyst 2960X-24TS-L SwitchCisco Catalyst 2960X-24TS-LL SwitchCisco Catalyst 2960X-48FPD-L SwitchCisco Catalyst 2960X-48FPS-L SwitchCisco Catalyst 2960X-48LPD-L SwitchCisco Catalyst 2960X-48LPS-L SwitchCisco Catalyst 2960X-48TD-L SwitchCisco Catalyst 2960X-48TS-L SwitchCisco Catalyst 2960X-48TS-LL SwitchCisco Catalyst 2960XR-24PD-I SwitchCisco Catalyst 2960XR-24PD-L SwitchCisco Catalyst 2960XR-24PS-I SwitchCisco Catalyst 2960XR-24PS-L SwitchCisco Catalyst 2960XR-24TD-I SwitchCisco Catalyst 2960XR-24TD-L SwitchCisco Catalyst 2960XR-24TS-I SwitchCisco Catalyst 2960XR-24TS-L SwitchCisco Catalyst 2960XR-48FPD-I SwitchCisco Catalyst 2960XR-48FPD-L SwitchCisco Catalyst 2960XR-48FPS-I SwitchCisco Catalyst 2960XR-48FPS-L SwitchCisco Catalyst 2960XR-48LPD-I SwitchCisco Catalyst 2960XR-48LPD-L SwitchCisco Catalyst 2960XR-48LPS-I SwitchCisco Catalyst 2960XR-48LPS-L SwitchCisco Catalyst 2960XR-48TD-I SwitchCisco Catalyst 2960XR-48TD-L SwitchCisco Catalyst 2960XR-48TS-I SwitchCisco Catalyst 2960XR-48TS-L SwitchCisco Catalyst 2970G-24T SwitchCisco Catalyst 2970G-24TS SwitchCisco Catalyst 2975 SwitchCisco Catalyst 3550 12G SwitchCisco Catalyst 3550 12T SwitchCisco Catalyst 3550 24 DC SMI SwitchCisco Catalyst 3550 24 EMI SwitchCisco Catalyst 3550 24 FX SMI SwitchCisco Catalyst 3550 24 PWR SwitchCisco Catalyst 3550 24 SMI SwitchCisco Catalyst 3550 48 EMI SwitchCisco Catalyst 3550 48 SMI SwitchCisco Catalyst 3560-12PC-S Compact SwitchCisco Catalyst 3560-24PS SwitchCisco Catalyst 3560-24TS SwitchCisco Catalyst 3560-48PS SwitchCisco Catalyst 3560-48TS SwitchCisco Catalyst 3560-8PC Compact SwitchCisco Catalyst 3560C-12PC-S SwitchCisco Catalyst 3560C-8PC-S SwitchCisco Catalyst 3560CG-8PC-S Compact SwitchCisco Catalyst 3560CG-8TC-S Compact SwitchCisco Catalyst 3560CPD-8PT-S Compact SwitchCisco Catalyst 3560CX-12PC-S SwitchCisco Catalyst 3560CX-12PD-S SwitchCisco Catalyst 3560CX-12TC-S SwitchCisco Catalyst 3560CX-8PC-S SwitchCisco Catalyst 3560CX-8PT-S SwitchCisco Catalyst 3560CX-8TC-S SwitchCisco Catalyst 3560CX-8XPD-S SwitchCisco Catalyst 3560E-12D-E SwitchCisco Catalyst 3560E-12D-S SwitchCisco Catalyst 3560E-12SD-E SwitchCisco Catalyst 3560E-12SD-S SwitchCisco Catalyst 3560E-24PD-E SwitchCisco Catalyst 3560E-24PD-S SwitchCisco Catalyst 3560E-24TD-E SwitchCisco Catalyst 3560E-24TD-S SwitchCisco Catalyst 3560E-48PD-E SwitchCisco Catalyst 3560E-48PD-EF SwitchCisco Catalyst 3560E-48PD-S SwitchCisco Catalyst 3560E-48PD-SF SwitchCisco Catalyst 3560E-48TD-E SwitchCisco Catalyst 3560E-48TD-S SwitchCisco Catalyst 3560G-24PS SwitchCisco Catalyst 3560G-24TS SwitchCisco Catalyst 3560G-48PS SwitchCisco Catalyst 3560G-48TS SwitchCisco Catalyst 3560V2-24DC SwitchCisco Catalyst 3560V2-24PS SwitchCisco Catalyst 3560V2-24TS SwitchCisco Catalyst 3560V2-48PS SwitchCisco Catalyst 3560V2-48TS SwitchCisco Catalyst 3560X-24P-E SwitchCisco Catalyst 3560X-24P-L SwitchCisco Catalyst 3560X-24P-S SwitchCisco Catalyst 3560X-24T-E SwitchCisco Catalyst 3560X-24T-L SwitchCisco Catalyst 3560X-24T-S SwitchCisco Catalyst 3560X-24U-E SwitchCisco Catalyst 3560X-24U-L SwitchCisco Catalyst 3560X-24U-S SwitchCisco Catalyst 3560X-48P-E SwitchCisco Catalyst 3560X-48P-L SwitchCisco Catalyst 3560X-48P-S SwitchCisco Catalyst 3560X-48PF-E SwitchCisco Catalyst 3560X-48PF-L SwitchCisco Catalyst 3560X-48PF-S SwitchCisco Catalyst 3560X-48T-E SwitchCisco Catalyst 3560X-48T-L SwitchCisco Catalyst 3560X-48T-S SwitchCisco Catalyst 3560X-48U-E SwitchCisco Catalyst 3560X-48U-L SwitchCisco Catalyst 3560X-48U-S SwitchCisco Catalyst 3750 Metro 24-AC SwitchCisco Catalyst 3750 Metro 24-DC SwitchCisco Catalyst 3750-24FS SwitchCisco Catalyst 3750-24PS SwitchCisco Catalyst 3750-24TS SwitchCisco Catalyst 3750-48PS SwitchCisco Catalyst 3750-48TS SwitchCisco Catalyst 3750E-24PD-E SwitchCisco Catalyst 3750E-24PD-S SwitchCisco Catalyst 3750E-24TD-E SwitchCisco Catalyst 3750E-24TD-S SwitchCisco Catalyst 3750E-48PD-E SwitchCisco Catalyst 3750E-48PD-EF SwitchCisco Catalyst 3750E-48PD-S SwitchCisco Catalyst 3750E-48PD-SF SwitchCisco Catalyst 3750E-48TD-E SwitchCisco Catalyst 3750E-48TD-S SwitchCisco Catalyst 3750G-12S SwitchCisco Catalyst 3750G-12S-SD SwitchCisco Catalyst 3750G-16TD SwitchCisco Catalyst 3750G-24PS SwitchCisco Catalyst 3750G-24T SwitchCisco Catalyst 3750G-24TS SwitchCisco Catalyst 3750G-24TS-1U SwitchCisco Catalyst 3750G-48PS SwitchCisco Catalyst 3750G-48TS SwitchCisco Catalyst 3750V2-24FS SwitchCisco Catalyst 3750V2-24PS SwitchCisco Catalyst 3750V2-24TS SwitchCisco Catalyst 3750V2-48PS SwitchCisco Catalyst 3750V2-48TS SwitchCisco Catalyst 3750X-12S-E SwitchCisco Catalyst 3750X-12S-S SwitchCisco Catalyst 3750X-24P-E SwitchCisco Catalyst 3750X-24P-L SwitchCisco Catalyst 3750X-24P-S SwitchCisco Catalyst 3750X-24S-E SwitchCisco Catalyst 3750X-24S-S SwitchCisco Catalyst 3750X-24T-E SwitchCisco Catalyst 3750X-24T-L SwitchCisco Catalyst 3750X-24T-S SwitchCisco Catalyst 3750X-24U-E SwitchCisco Catalyst 3750X-24U-L SwitchCisco Catalyst 3750X-24U-S SwitchCisco Catalyst 3750X-48P-E SwitchCisco Catalyst 3750X-48P-L SwitchCisco Catalyst 3750X-48P-S SwitchCisco Catalyst 3750X-48PF-E SwitchCisco Catalyst 3750X-48PF-L SwitchCisco Catalyst 3750X-48PF-S SwitchCisco Catalyst 3750X-48T-E SwitchCisco Catalyst 3750X-48T-L SwitchCisco Catalyst 3750X-48T-S SwitchCisco Catalyst 3750X-48U-E SwitchCisco Catalyst 3750X-48U-L SwitchCisco Catalyst 3750X-48U-S SwitchCisco Catalyst 4000 Supervisor Engine ICisco Catalyst 4000/4500 Supervisor Engine IVCisco Catalyst 4000/4500 Supervisor Engine VCisco Catalyst 4500 Series Supervisor Engine II-PlusCisco Catalyst 4500 Series Supervisor Engine II-Plus-TSCisco Catalyst 4500 Series Supervisor Engine V-10GECisco Catalyst 4500 Series Supervisor II-Plus-10GECisco Catalyst 4500 Supervisor Engine 6-ECisco Catalyst 4500 Supervisor Engine 6L-ECisco Catalyst 4900M SwitchCisco Catalyst 4928 10 Gigabit Ethernet SwitchCisco Catalyst 4948 10 Gigabit Ethernet SwitchCisco Catalyst 4948 SwitchCisco Catalyst 4948E Ethernet SwitchCisco Catalyst 4948E-F Ethernet SwitchCisco Catalyst Blade Switch 3020 for HPCisco Catalyst Blade Switch 3030 for DellCisco Catalyst Blade Switch 3032 for Dell M1000ECisco Catalyst Blade Switch 3040 for FSCCisco Catalyst Blade Switch 3120 for HPCisco Catalyst Blade Switch 3120X for HPCisco Catalyst Blade Switch 3130 for Dell M1000ECisco Catalyst C2928-24LT-C SwitchCisco Catalyst C2928-48TC-C SwitchCisco Catalyst Switch Module 3012 for IBM BladeCenterCisco Catalyst Switch Module 3110 for IBM BladeCenterCisco Catalyst Switch Module 3110X for IBM BladeCenterCisco Embedded Service 2020 24TC CON B SwitchCisco Embedded Service 2020 24TC CON SwitchCisco Embedded Service 2020 24TC NCP B SwitchCisco Embedded Service 2020 24TC NCP SwitchCisco Embedded Service 2020 CON B SwitchCisco Embedded Service 2020 CON SwitchCisco Embedded Service 2020 NCP B SwitchCisco Embedded Service 2020 NCP SwitchCisco Enhanced Layer 2 EtherSwitch Service ModuleCisco Enhanced Layer 2/3 EtherSwitch Service ModuleCisco Gigabit Ethernet Switch Module (CGESM) for HPCisco IE 2000-16PTC-G Industrial Ethernet SwitchCisco IE 2000-16T67 Industrial Ethernet SwitchCisco IE 2000-16T67P Industrial Ethernet SwitchCisco IE 2000-16TC Industrial Ethernet SwitchCisco IE 2000-16TC-G Industrial Ethernet SwitchCisco IE 2000-16TC-G-E Industrial Ethernet SwitchCisco IE 2000-16TC-G-N Industrial Ethernet SwitchCisco IE 2000-16TC-G-X Industrial Ethernet SwitchCisco IE 2000-24T67 Industrial Ethernet SwitchCisco IE 2000-4S-TS-G Industrial Ethernet SwitchCisco IE 2000-4T Industrial Ethernet SwitchCisco IE 2000-4T-G Industrial Ethernet SwitchCisco IE 2000-4TS Industrial Ethernet SwitchCisco IE 2000-4TS-G Industrial Ethernet SwitchCisco IE 2000-8T67 Industrial Ethernet SwitchCisco IE 2000-8T67P Industrial Ethernet SwitchCisco IE 2000-8TC Industrial Ethernet SwitchCisco IE 2000-8TC-G Industrial Ethernet SwitchCisco IE 2000-8TC-G-E Industrial Ethernet SwitchCisco IE 2000-8TC-G-N Industrial Ethernet SwitchCisco IE 3000-4TC Industrial Ethernet SwitchCisco IE 3000-8TC Industrial Ethernet SwitchCisco IE-3010-16S-8PC Industrial Ethernet SwitchCisco IE-3010-24TC Industrial Ethernet SwitchCisco IE-4000-16GT4G-E Industrial Ethernet SwitchCisco IE-4000-16T4G-E Industrial Ethernet SwitchCisco IE-4000-4GC4GP4G-E Industrial Ethernet SwitchCisco IE-4000-4GS8GP4G-E Industrial Ethernet SwitchCisco IE-4000-4S8P4G-E Industrial Ethernet SwitchCisco IE-4000-4T4P4G-E Industrial Ethernet SwitchCisco IE-4000-4TC4G-E Industrial Ethernet SwitchCisco IE-4000-8GS4G-E Industrial Ethernet SwitchCisco IE-4000-8GT4G-E Industrial Ethernet SwitchCisco IE-4000-8GT8GP4G-E Industrial Ethernet SwitchCisco IE-4000-8S4G-E Industrial Ethernet SwitchCisco IE-4000-8T4G-E Industrial Ethernet SwitchCisco IE-4010-16S12P Industrial Ethernet SwitchCisco IE-4010-4S24P Industrial Ethernet SwitchCisco IE-5000-12S12P-10G Industrial Ethernet SwitchCisco IE-5000-16S12P Industrial Ethernet SwitchCisco ME 4924-10GE SwitchCisco RF Gateway 10Cisco SM-X Layer 2/3 EtherSwitch Service Module
本文转自d1net（转载）
相关资源：思科XR学习宝典-Cisco IOS XR Fundamentals