Evil-DB LogoEvil-DB
← All CVEs

CVE-2017-12240

critical · 9.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2022-03-03Remediation due 2022-03-24

The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a buffer overflow condition in the DHCP relay subsystem of the affected software. An attacker could exploit this vulnerability by sending a crafted DHCP Version 4 (DHCPv4) packet to an affected system. A successful exploit could allow the attacker to execute arbitrary code and gain full control of the affected system or cause the affected system to reload, resulting in a DoS condition. Cisco Bug IDs: CSCsm45390, CSCuw77959.

9.8
CVSS
13.8%
EPSS (exploit prob.)
96th
EPSS percentile
2017-09-29
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-20CWE-119

Affected products

VendorProductAffected versions
ciscoios>= 12.2, <= 15.6
cisco1000_integrated_services_routerall versions
cisco1100-4g_integrated_services_routerall versions
cisco1100-4gltegb_integrated_services_routerall versions
cisco1100-4gltena_integrated_services_routerall versions
cisco1100-4p_integrated_services_routerall versions
cisco1100-6g_integrated_services_routerall versions
cisco1100-8p_integrated_services_routerall versions
cisco1100-lte_integrated_services_routerall versions
cisco1100_integrated_services_routerall versions
cisco1101-4p_integrated_services_routerall versions
cisco1101_integrated_services_routerall versions
cisco1109-2p_integrated_services_routerall versions
cisco1109-4p_integrated_services_routerall versions
cisco1109_integrated_services_routerall versions
cisco1111x-8p_integrated_services_routerall versions
cisco1111x_integrated_services_routerall versions
cisco111x_integrated_services_routerall versions
cisco1120_integrated_services_routerall versions
cisco1131_integrated_services_routerall versions
cisco1160_integrated_services_routerall versions
cisco1801_integrated_service_routerall versions
cisco1802_integrated_service_routerall versions
cisco1803_integrated_service_routerall versions
cisco1811_integrated_service_routerall versions
cisco1812_integrated_service_routerall versions
cisco1841_integrated_service_routerall versions
cisco1861_integrated_service_routerall versions
cisco1905_integrated_services_routerall versions
cisco1906c_integrated_services_routerall versions
cisco1921_integrated_services_routerall versions
cisco1941_integrated_services_routerall versions
cisco1941w_integrated_services_routerall versions
cisco4000_integrated_services_routerall versions
cisco422_integrated_services_routerall versions
cisco4221_integrated_services_routerall versions
cisco8101-32fhall versions
cisco8101-32hall versions
cisco8102-64hall versions
cisco8201all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-12240