Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2017-3881

Your trail

Where next?

Selected cve

CVE-2017-3881

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors: (1) the failure to restrict the use of CMP-specific Telnet options only to internal, local communications between cluster members and instead accept and process such options over any Telnet connection to an affected device; and (2) the incorrect processing of malformed CMP-specific Telnet options. An attacker could exploit this vulnerability by sending malformed CMP-specific Telnet options while establishing a Telnet session with an affected Cisco device configured to accept Telnet connections. An exploit could allow an attacker to execute arbitrary code an

79 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority87.9–89.2

Coverage95.0%

Connections79

Choose an action.

Evidence state

identity unresolved
known present
source constrained
evidence unknown

Snapshot-bound reason tuple

Last verified source snapshot retainedfactor_a_kev

The admitted source contract constrains coverage for this claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Review source contract

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Resolve identity

Connections 79

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960-plus_24tc-l

3ab90133-d921-4ede-b359-9ce9adbe5251

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960l-8ps-ll

5deded8d-98b0-46b7-904d-02097f7dfe78

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960x-48ts-ll

776d749e-61de-45bf-a602-98675cd5090d

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960s-48lps-l

96b23622-8b6d-4bc5-864c-f2ae4b26c4b1

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560c-12pc-s

aabc79ba-0405-4d7b-9d9f-078818e07ec1

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750g-24ts

55553b93-7779-45cc-8b80-50ecaec80d40

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750g-48ps

9e759484-4d3f-4e7d-ac91-e48712251ae7

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560e-48pd-ef

3fc188e7-89d8-4e31-a268-c13d23e9d96a

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · gigabit_ethernet_switch_module_(cgesm)

71734beb-28e0-4b46-b476-8111145c1842

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960xr-48lps-l

23cda626-c897-44a8-9a57-07cf286fb606

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960x-48ts-l

d62f14f7-9c06-4449-9fce-43a5373459ec

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960x-48lps-l

84253793-f678-44a8-8146-ce2716df56e7

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960-plus_48pst-s

942970c2-b1aa-4b69-b3cd-eb54e90d1267

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_4948

3d7473e9-5ccf-4819-8ec4-59742ff6b11c

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560e-24td-s

213e35aa-7f94-48b1-947a-3d70469a3ab9

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560cx-8tc-s

aeafe4b2-af42-4dc8-b775-d8a9cfc5db56

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750x-24u-l

22af8b8f-e27f-434c-9864-d2379f7bf178

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560e-48td-s

e47a482f-0683-4b1b-8ca8-4c117f09a540

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560cx-8pt-s

31409af9-d7a3-4472-9615-708746eec9e1

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · ie_2000-8tc-g-e_industrial_ethernet_switch

9ce45bdb-2ddb-4e3e-ae7d-f33341194e24

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_4500_supervisor_engine_v-10ge

529765f0-1394-4e46-a127-1578ca43c83f

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560x-48u-s

c446e778-51f1-4c3f-9626-98162047ce05

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960c-8tc-s

ec3c7dc6-dc5c-4d91-b1bf-07c0ac001b18

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_blade_switch_3040

0424f0a6-7788-4d6f-83f0-813a7b7ae431

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560e-24pd-e

cfdcb6de-bf8a-4ef5-ace5-bd677ae4c022

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560-24ps

f1a5bde7-dda8-4506-b437-dc5d77a031aa

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750x-48p-s

b6b50354-e550-4067-8768-419f90381ff1

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750e-48td-s

b08afcaa-7d86-473e-8aa6-30455c9cd300

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750e-48pd-s

44f6de2e-9ecd-4a5d-8b24-470cb8e2a2ac

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750v2-24ps

b7408015-c807-43d0-8e51-8638be9b26ed

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560e-48pd-s

95e76244-c767-4086-ae32-11f3c7a958fd

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960xr-24pd-i

8daa444e-2d33-45d7-89e3-bbb82c2ab2b3

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3550_24_dc_smi

53895d82-6196-44c8-abdd-8a257c28ff5d

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960l-48ts-ll

c07b68f3-7222-4b6d-b8c6-7496b3b6c7a4

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750g-24ps

0addfe4f-b63d-47df-aa56-cdfdec912918

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750x-48p-e

8a8c1c85-93b3-4ec7-9f89-ab5d2dcd0d9b

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960-plus_24tc-s

85dd4c85-1f09-4982-9560-eeafa7acab40

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_4500_supervisor_engine_v

3159336c-6636-4629-8c0c-1adde43b52a7

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2918-48tc-c

847b19d5-f0e8-4fa5-a0c5-29624a7097ae

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3550_24_fx_smi

fed4d404-fff2-4efb-aade-b8adc1ba77d8

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560x-24p-e

bbd9e044-95d2-48ad-bd99-50a891508d4f

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560x-24u-l

84041df4-6e7c-490c-a74a-9ff4886332fb

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560-8pc

fbf69529-db89-431d-8575-3584b48a9ba6

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560x-48pf-e

1dd359f1-0618-45f5-bddf-b0c324ce3c1a

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960-48pst-s

8cc9e1dc-b1ef-4dbd-a70d-c9903ebb1f81

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960x-48fps-l

3bdc8e2d-3486-4093-ab59-8f19980005c1

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750x-48u-e

a70bac1b-1c56-4bfc-8f0e-eca6d58eabfa

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_4900m

326b39ca-5f91-47c2-8743-639d173f3324

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · ie-4000-4tc4g-e_industrial_ethernet_switch

5ed03417-3d5f-4566-ada1-580ffad4eb3d

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560x-48u-l

33c3e20c-bb9d-47f3-9485-ae3e0129b3ea

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2970g-24ts

488982fb-6a3f-4bcd-bffb-0e7a54fc2d61

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750x-48p-l

94be6c17-b59b-48c9-8a90-03a90e2c80c2

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960x-48lpd-l

d7572150-ef62-49be-a020-571fa44c45e4

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560x-24t-s

479c51d4-1c16-4cdc-b664-ebdce17b458a

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960s-48ts-l

ffb2f29e-9a8d-4ddf-8ce7-f89b2e4acc4f

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · ie-4000-4gs8gp4g-e_industrial_ethernet_switch

ca422b2b-9867-4b70-91d3-a7d405e1f111

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750g-48ts

8ef109f5-5609-4aae-9c9d-ddaf54791fa4

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750x-24t-s

cd996e48-5d5c-4c13-bd1f-9111364b48e4

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750g-24ts-1u

65c6dbfa-0262-44fd-8815-532b6866c7a3

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960-24pc-l

baf1ac0b-dcba-4734-9d24-4cff715dcbad

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560v2-24dc

ac9bc917-6814-4a1a-8a14-2b53b580dd73

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2918-24tt-c

0c94eaa7-9ec1-46c3-97fd-be027e6a963c

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750e-24td-e

b895cdbb-0dd9-40df-9f68-a81149d74647

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960-8tc-l

022e1642-cff8-4b82-b71a-9355d36a096d

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560x-48t-s

f46f672f-253c-410c-be0b-c47060c72843

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3550_12g

59b41c2b-5957-4827-98e8-97cf44ffe360

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960xr-48lps-i

2484f5db-a60d-4cd6-baac-d076b19adb35

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960xr-24ps-i

a7918b02-02cc-4db8-be17-a76a00b6ecb5

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3560e-12d-e

8e1425d7-9a55-4b4c-bee5-5a4884140d43

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960l-24ts-ll

5aa67655-7cce-4bef-85ec-43424cde22d9

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_switch_module_3012

723f7b90-6e16-48d1-9831-82cfc6fa2121

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750x-24u-s

e9858e3d-d1d9-43c2-a98e-edb63e086d60

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960s-24ts-l

54711907-f4ff-4663-971a-3ca7cd6d9569

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960pd-8tt-l

6e303aa6-f485-4f32-b18e-92a82b45ef1c

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750x-48u-s

0102b813-b11c-4871-ae87-9bb124d0d5ef

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_2960xr-48td-i

257c1e6a-fa61-43f3-8dcb-30d311ac445d

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_4928_10_gigabit_ethernet_switch

762acf39-a70c-4f23-87ba-f329e1c678be

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · catalyst_3750e-24td-s

4cbdd7e8-c82a-4366-aeed-4d9928c931a8

has environmental constraint1 retained · stored CVE-2017-3881 → cisco · ie_2000-8t67p_industrial_ethernet_switch

89429fc6-dc4e-4bed-b9d7-bd2431cc0c04

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Oct 22, 2026, 6:07 PM UTC · 80 entities · 79 relationships · bounded partial