CVE:CVE-2017-3859
CNNVD:CNNVD-201703-988
Cisco ASR 920 Series Aggregation Services Routers是美国思科（Cisco）公司的ASR 920系列多功能路由器。Zero Touch Provisioning是其中的一个自动化配置功能。
Cisco ASR 920 Series Aggregation Services Routers中的Zero Touch Provisioning功能的DHCP代码存在安全漏洞。远程攻击者可利用该漏洞造成拒绝服务（设备重载）。
solution:Upgrade cisco ios_xe to a higher version than 3.13.4s,3.13.5as,3.13.5s,3.13.6as,3.13.6s,3.14.3s,3.14.4s,3.15.2s,3.15.3s,3.15.4s,3.16.0cs,3.16.0s,3.16.1as,3.16.1s,3.16.2as,3.16.2bs,3.16.2s,3.16.3as,3.16.3s,3.17.0s,3.17.1as,3.17.1s,3.17.2s,3.18.0as,3.18.0s,3.18.0sp,3.18.1asp,3.18.1bsp,3.18.1csp,3.18.1s,3.18.1sp,3.18.2s,3.18.3vs,and avoid the version 3.13.4s,3.13.5as,3.13.5s,3.13.6as,3.13.6s,3.14.3s,3.14.4s,3.15.2s,3.15.3s,3.15.4s,3.16.0cs,3.16.0s,3.16.1as,3.16.1s,3.16.2as,3.16.2bs,3.16.2s,3.16.3as,3.16.3s,3.17.0s,3.17.1as,3.17.1s,3.17.2s,3.18.0as,3.18.0s,3.18.0sp,3.18.1asp,3.18.1bsp,3.18.1csp,3.18.1s,3.18.1sp,3.18.2s,3.18.3vs