CVE-2017-12232

medium · 6.5Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2022-03-03Remediation due 2022-03-24

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a misclassification of Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc03809.

6.5

CVSS

2.2%

EPSS (exploit prob.)

81st

EPSS percentile

2017-09-29

Published

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-399

Affected products

Vendor	Product	Affected versions
cisco	ios	>= 15.0, <= 15.6
cisco	1000_integrated_services_router	all versions
cisco	1100-4g/6g_integrated_services_router	all versions
cisco	1100-4g_integrated_services_router	all versions
cisco	1100-4gltegb_integrated_services_router	all versions
cisco	1100-4gltena_integrated_services_router	all versions
cisco	1100-8p_integrated_services_router	all versions
cisco	1100-lte_integrated_services_router	all versions
cisco	1100_integrated_services_router	all versions
cisco	1101-4p_integrated_services_router	all versions
cisco	1101_integrated_services_router	all versions
cisco	1109-2p_integrated_services_router	all versions
cisco	1109-4p_integrated_services_router	all versions
cisco	1109_integrated_services_router	all versions
cisco	1111x-8p_integrated_services_router	all versions
cisco	1111x_integrated_services_router	all versions
cisco	111x_integrated_services_router	all versions
cisco	1120_integrated_services_router	all versions
cisco	1131_integrated_services_router	all versions
cisco	1160_integrated_services_router	all versions
cisco	1801_integrated_service_router	all versions
cisco	1802_integrated_service_router	all versions
cisco	1803_integrated_service_router	all versions
cisco	1811_integrated_service_router	all versions
cisco	1812_integrated_service_router	all versions
cisco	1841_integrated_service_router	all versions
cisco	1861_integrated_service_router	all versions
cisco	1905_integrated_services_router	all versions
cisco	1906c_integrated_services_router	all versions
cisco	1921_integrated_services_router	all versions
cisco	1941_integrated_services_router	all versions
cisco	1941w_integrated_services_router	all versions
cisco	4000_integrated_services_router	all versions
cisco	422_integrated_services_router	all versions
cisco	4221_integrated_services_router	all versions
cisco	4321/k9-rf_integrated_services_router	all versions
cisco	4321/k9-ws_integrated_services_router	all versions
cisco	4321/k9_integrated_services_router	all versions
cisco	4321_integrated_services_router	all versions
cisco	4331/k9-rf_integrated_services_router	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-12232