Evil-DB LogoEvil-DB
← All CVEs

CVE-2017-12234

high · 7.5Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2022-03-03Remediation due 2022-03-24

Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc43709.

7.5
CVSS
7.1%
EPSS (exploit prob.)
94th
EPSS percentile
2017-09-29
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
ciscoios>= 12.4, <= 15.6
cisco1000_integrated_services_routerall versions
cisco1100-4g/6g_integrated_services_routerall versions
cisco1100-4g_integrated_services_routerall versions
cisco1100-4gltegb_integrated_services_routerall versions
cisco1100-4gltena_integrated_services_routerall versions
cisco1100-4pall versions
cisco1100-4p_integrated_services_routerall versions
cisco1100-6g_integrated_services_routerall versions
cisco1100-8pall versions
cisco1100-8p_integrated_services_routerall versions
cisco1100-lte_integrated_services_routerall versions
cisco1100_integrated_services_routerall versions
cisco1100_terminal_services_gatewaysall versions
cisco1101-4pall versions
cisco1101-4p_integrated_services_routerall versions
cisco1101_integrated_services_routerall versions
cisco1109-2pall versions
cisco1109-4pall versions
cisco1111-4pweall versions
cisco1111-8pwball versions
cisco1111x-8pall versions
cisco1113-8plteeaweall versions
cisco1113-8pmweall versions
cisco1113-8pweall versions
cisco1116-4plteeaweall versions
cisco1116-4pweall versions
cisco1117-4plteeaweall versions
cisco1117-4pmlteeaweall versions
cisco1117-4pmweall versions
cisco1117-4pweall versions
cisco1120all versions
cisco1120_connected_grid_routerall versions
cisco1120_integrated_services_routerall versions
cisco1131_integrated_services_routerall versions
cisco1160_integrated_services_routerall versions
cisco1801_integrated_service_routerall versions
cisco1802_integrated_service_routerall versions
cisco1803_integrated_service_routerall versions
cisco1811_integrated_service_routerall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-12234