CVE-2017-3826

CVE-2017-3826 describes a denial-of-service vulnerability in Cisco NetFlow Generation Appliances (NGA) 3140, 3240, and 3340 running software prior to 1.1(1a). This flaw stems from incomplete validation of Stream Control Transmission Protocol (SCTP) packets monitored on NGA data ports. An unauthenticated, remote attacker can exploit this by sending specially crafted SCTP packets, causing the appliance to hang or unexpectedly reload. The vulnerability carries a CVSSv3 score of 7.5 (HIGH), indicating a high-impact denial-of-service condition with low attack complexity and no user interaction required. While the attack vector is network-based, the vulnerability specifically affects monitored traffic, not packets addressed directly to the NGA. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion is minimal, with only one mention found, and there is no media coverage.