© 2026 vulntracker.io

CVE-2017-12228

N/A

Published: September 28, 2017 at 07:00 AM UTC

Updated: June 17, 2026 at 01:02 AM UTC

2 products affected across 1 vendorIOSIOS Xe

Using Cisco IOS and IOS XE by N/A?

Get instant alerts when new vulnerabilities affect Cisco IOS and IOS XE - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 1.0%

Description

A vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and Cisco IOS XE 3.3 through 16.4 could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software. Cisco Bug IDs: CSCvc33171.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS · Cisconpm

95%

12.4(25e)jao20s 12.4(25e)jao3a 12.4(25e)jap1n 12.4(25e)jap9 15.0(2)ej 15.0(2)ej1 15.0(2)ex 15.0(2)ex1 15.0(2)ex10 15.0(2)ex13 15.0(2)ex2 15.0(2)ex3 15.0(2)ex4 15.0(2)ex5 15.0(2)ex8 15.0(2)ez 15.0(2)se1 15.0(2)se10 15.0(2)se10a 15.0(2)se2 15.0(2)se3 15.0(2)se4 15.0(2)se5 15.0(2)se6 15.0(2)se7 15.0(2)se8 15.0(2)se9 15.0(2)sqd7 15.0(2a)ex5 15.0(2a)se9 15.1(1)sy 15.1(1)sy1 15.1(1)sy2 15.1(1)sy3 15.1(1)sy4 15.1(1)sy5 15.1(1)sy6 15.1(2)sg7a 15.1(2)sy 15.1(2)sy1 15.1(2)sy10 15.1(2)sy2 15.1(2)sy3 15.1(2)sy4 15.1(2)sy4a 15.1(2)sy5 15.1(2)sy6 15.1(2)sy7 15.1(2)sy8 15.1(2)sy9 15.2(1)e 15.2(1)e1 15.2(1)e2 15.2(1)e3 15.2(1)ey 15.2(1)sy 15.2(1)sy0a 15.2(1)sy1 15.2(1)sy1a 15.2(1)sy2 15.2(1)sy3 15.2(1)sy4 15.2(2)e 15.2(2)e1 15.2(2)e2 15.2(2)e3 15.2(2)e4 15.2(2)e5 15.2(2)e5a 15.2(2)e5b 15.2(2)e6 15.2(2)ea1 15.2(2)ea2 15.2(2)ea3 15.2(2)eb 15.2(2)eb1 15.2(2)eb2 15.2(2)gc 15.2(2)ja 15.2(2)ja1 15.2(2)jax 15.2(2)jax1 15.2(2)jb 15.2(2)jb2 15.2(2)jb3 15.2(2)jb4 15.2(2)jb5 15.2(2)jb6 15.2(2)jn1 15.2(2)jn2 15.2(2)s 15.2(2)s0a 15.2(2)s0c 15.2(2)s1 15.2(2)s2 15.2(2)sng 15.2(2)snh1 15.2(2)sni 15.2(2)sy 15.2(2)sy1 15.2(2)sy2 15.2(2)t 15.2(2)t1 15.2(2)t2 15.2(2)t3 15.2(2)t4 15.2(2a)e1 15.2(2a)e2 15.2(3)e 15.2(3)e1 15.2(3)e2 15.2(3)e3 15.2(3)e4 15.2(3)e5 15.2(3)ea 15.2(3)ex 15.2(3)gc 15.2(3)gc1 15.2(3)t 15.2(3)t1 15.2(3)t2 15.2(3)t3 15.2(3)t4 15.2(3a)e 15.2(3m)e2 15.2(3m)e3 15.2(3m)e8 15.2(4)e 15.2(4)e1 15.2(4)e2 15.2(4)e3 15.2(4)e4 15.2(4)ea 15.2(4)ea1 15.2(4)ea3 15.2(4)ea4 15.2(4)ea5 15.2(4)ec 15.2(4)ec1 15.2(4)ec2 15.2(4)gc 15.2(4)gc1 15.2(4)gc2 15.2(4)gc3 15.2(4)ja 15.2(4)ja1 15.2(4)jb 15.2(4)jb1 15.2(4)jb2 15.2(4)jb3 15.2(4)jb3a 15.2(4)jb3b 15.2(4)jb3h 15.2(4)jb3s 15.2(4)jb4 15.2(4)jb5 15.2(4)jb5h 15.2(4)jb5m 15.2(4)jb6 15.2(4)jb7 15.2(4)jn 15.2(4)m 15.2(4)m1 15.2(4)m10 15.2(4)m11 15.2(4)m2 15.2(4)m3 15.2(4)m4 15.2(4)m5 15.2(4)m6 15.2(4)m6a 15.2(4)m7 15.2(4)m8 15.2(4)m9 15.2(4)s 15.2(4)s1 15.2(4)s2 15.2(4)s3 15.2(4)s3a 15.2(4)s4 15.2(4)s4a 15.2(4)s5 15.2(4)s6 15.2(4)s7 15.2(4m)e1 15.2(4m)e3 15.2(4n)e2 15.2(4o)e2 15.2(4p)e1 15.2(5)e 15.2(5)e1 15.2(5)e2a 15.2(5)e2b 15.2(5)ea 15.2(5)ex 15.2(5a)e 15.2(5a)e1 15.2(5b)e 15.2(5c)e 15.3(1)s 15.3(1)s1 15.3(1)s2 15.3(1)sy 15.3(1)sy1 15.3(1)sy2 15.3(1)t 15.3(1)t1 15.3(1)t2 15.3(1)t3 15.3(1)t4 15.3(2)s 15.3(2)s1 15.3(2)s2 15.3(2)t 15.3(2)t1 15.3(2)t2 15.3(2)t3 15.3(2)t4 15.3(3)ja 15.3(3)ja1 15.3(3)ja10 15.3(3)ja11 15.3(3)ja1m 15.3(3)ja1n 15.3(3)ja4 15.3(3)ja5 15.3(3)ja6 15.3(3)ja7 15.3(3)ja76 15.3(3)ja77 15.3(3)ja8 15.3(3)jaa 15.3(3)jab 15.3(3)jax 15.3(3)jax1 15.3(3)jax2 15.3(3)jb 15.3(3)jb75 15.3(3)jbb 15.3(3)jbb1 15.3(3)jbb2 15.3(3)jbb4 15.3(3)jbb5 15.3(3)jbb50 15.3(3)jbb6 15.3(3)jbb6a 15.3(3)jbb8 15.3(3)jc 15.3(3)jc1 15.3(3)jc2 15.3(3)jc3 15.3(3)jc4 15.3(3)jc5 15.3(3)jc50 15.3(3)jc51 15.3(3)jc6 15.3(3)jc7 15.3(3)jca7 15.3(3)jd 15.3(3)jd2 15.3(3)jd3 15.3(3)jd4 15.3(3)jda3 15.3(3)je 15.3(3)je1 15.3(3)jn3 15.3(3)jn4 15.3(3)jn7 15.3(3)jn8 15.3(3)jn9 15.3(3)jnb 15.3(3)jnb1 15.3(3)jnb2 15.3(3)jnb3 15.3(3)jnb4 15.3(3)jnb6 15.3(3)jnc 15.3(3)jnc1 15.3(3)jnc4 15.3(3)jnd 15.3(3)jnd1 15.3(3)jnd2 15.3(3)jnd3 15.3(3)jnp 15.3(3)jnp1 15.3(3)jnp2 15.3(3)jpb 15.3(3)jpb1 15.3(3)jpb2 15.3(3)jpc2 15.3(3)jpc3 15.3(3)jpd 15.3(3)m 15.3(3)m1 15.3(3)m2 15.3(3)m3 15.3(3)m4 15.3(3)m5 15.3(3)m6 15.3(3)m7 15.3(3)m8 15.3(3)m8a 15.3(3)m9 15.3(3)s 15.3(3)s1 15.3(3)s1a 15.3(3)s2 15.3(3)s3 15.3(3)s4 15.3(3)s5 15.3(3)s6 15.3(3)s7 15.3(3)s8 15.3(3)s8a 15.3(3)s9 15.4(1)cg 15.4(1)cg1 15.4(1)s 15.4(1)s1 15.4(1)s2 15.4(1)s3 15.4(1)s4 15.4(1)sy 15.4(1)sy1 15.4(1)sy2 15.4(1)t 15.4(1)t1 15.4(1)t2 15.4(1)t3 15.4(1)t4 15.4(2)cg 15.4(2)s 15.4(2)s1 15.4(2)s2 15.4(2)s3 15.4(2)s4 15.4(2)t 15.4(2)t1 15.4(2)t2 15.4(2)t3 15.4(2)t4 15.4(3)m 15.4(3)m1 15.4(3)m2 15.4(3)m3 15.4(3)m4 15.4(3)m5 15.4(3)m6 15.4(3)m6a 15.4(3)m7 15.4(3)s 15.4(3)s1 15.4(3)s2 15.4(3)s3 15.4(3)s4 15.4(3)s5 15.4(3)s5a 15.4(3)s6 15.4(3)s6a 15.4(3)s6b 15.4(3)s7 15.4(3)s7a 15.5(1)s 15.5(1)s1 15.5(1)s2 15.5(1)s3 15.5(1)s4 15.5(1)sy 15.5(1)sy1 15.5(1)t 15.5(1)t1 15.5(1)t2 15.5(1)t3 15.5(1)t4 15.5(2)s 15.5(2)s1 15.5(2)s2 15.5(2)s3 15.5(2)s4 15.5(2)t 15.5(2)t1 15.5(2)t2 15.5(2)t3 15.5(2)t4 15.5(3)m 15.5(3)m0a 15.5(3)m1 15.5(3)m2 15.5(3)m3 15.5(3)m4 15.5(3)m4a 15.5(3)m5 15.5(3)s 15.5(3)s0a 15.5(3)s1 15.5(3)s1a 15.5(3)s2 15.5(3)s2a 15.5(3)s2b 15.5(3)s3 15.5(3)s3a 15.5(3)s4 15.5(3)s4a 15.5(3)s4b 15.5(3)s4d 15.5(3)s5 15.5(3)sn 15.6(1)s 15.6(1)s1 15.6(1)s1a 15.6(1)s2 15.6(1)s3 15.6(1)t 15.6(1)t0a 15.6(1)t1 15.6(1)t2 15.6(1)t3 15.6(2)s 15.6(2)s0a 15.6(2)s1 15.6(2)s2 15.6(2)s3 15.6(2)sn 15.6(2)sp 15.6(2)sp1 15.6(2)sp1b 15.6(2)sp1c 15.6(2)sp2 15.6(2)sp2a 15.6(2)t 15.6(2)t1 15.6(2)t2 15.6(3)m 15.6(3)m0a 15.6(3)m1 15.6(3)m1b

IOS Xe · Cisco

95%

v ≤ 15.4(3)s16.1.1 16.1.2 16.1.3 16.1.3a 16.1.4 16.2.1 16.2.2 16.2.2a 16.2.3 16.3.1 16.3.1a 16.3.2 16.4.1 3.10.0s 3.10.1s 3.10.1xbs 3.10.2s 3.10.2ts 3.10.3s 3.10.4s 3.10.5s 3.10.6s 3.10.7s 3.10.8as 3.10.8s 3.10.9s 3.11.0s 3.11.1s 3.11.2s 3.11.3s 3.11.4s 3.12.0as 3.12.0s 3.12.1s 3.12.2s 3.12.3s 3.12.4s 3.13.0as 3.13.0s 3.13.1s 3.13.2as 3.13.2s 3.13.3s 3.13.4s 3.13.5as 3.13.5s 3.13.6as 3.13.6s 3.13.7as 3.13.7s 3.14.0s 3.14.1s 3.14.2s 3.14.3s 3.14.4s 3.15.0s 3.15.1cs 3.15.1s 3.15.2s 3.15.3s 3.15.4s 3.16.0cs 3.16.0s 3.16.1as 3.16.1s 3.16.2as 3.16.2bs 3.16.2s 3.16.3as 3.16.3s 3.16.4as 3.16.4bs 3.16.4ds 3.16.4s 3.16.5s 3.17.0s 3.17.1as 3.17.1s 3.17.3s 3.18.0as 3.18.0s 3.18.0sp 3.18.1asp 3.18.1bsp 3.18.1csp 3.18.1s 3.18.1sp 3.18.2s 3.18.2sp 3.18.3vs 3.3.0xo 3.3.1xo 3.3.2xo 3.5.0e 3.5.1e 3.5.2e 3.5.3e 3.6.0e 3.6.0s 3.6.1e 3.6.1s 3.6.2ae 3.6.2e 3.6.2s 3.6.3e 3.6.4e 3.6.5ae 3.6.5be 3.6.5e 3.6.6e 3.7.0bs 3.7.0e 3.7.0s 3.7.1as 3.7.1e 3.7.1s 3.7.2e 3.7.2s 3.7.2ts 3.7.3e 3.7.3s 3.7.4as 3.7.4e 3.7.4s 3.7.5e 3.7.5s 3.7.6s 3.7.7s 3.8.0e 3.8.0ex 3.8.0s 3.8.1e 3.8.1s 3.8.2e 3.8.2s 3.8.3e 3.8.4e 3.9.0as 3.9.0e 3.9.0s 3.9.1as 3.9.1e 3.9.1s 3.9.2s

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-pnp

References (3)

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/101065

VDB Entryx_refsource_SECTRACKThird Party Advisory

Source: [email protected]

http://www.securitytracker.com/id/1039450

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-pnp

CVSS

4.3MEDIUM[email protected]

Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-20CWE-295

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card