CVE-2017-12232mediumunder attackCWE-399

CVE-2017-12232: medium-severity vulnerability in Cisco IOS

Published · Updated

Follow this CVE+ Monitor IOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

43Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Attendcvss 6.5epss 2.2%
from disclosure to weapon
Published on NVDSep 28
CISA KEV+1617d
Action required by CISAfederal deadline: 2022-03-24

Apply updates per vendor instructions.

In short

A bug in Cisco ISR G2 routers allows an attacker on the same network to send a specially crafted Ethernet frame that crashes the router, causing it to restart and stop working temporarily.

Technical detail

The vulnerability stems from improper classification of Ethernet frames in Cisco IOS 15.0-15.6 on ISR G2 routers, allowing unauthenticated adjacent attackers to trigger a device reload via malformed frames. Exploitation requires network adjacency and results in denial of service; no authentication is required.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a misclassification of Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc03809.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
n/a · Cisco IOS