CVE-2017-12232

MEDIUM
6.5
CVSS Score
Published: September 28, 2017 at 07:00 AM UTC
Updated: June 17, 2026 at 01:02 AM UTC
129 products affected across 1 vendorIOSAsr 1002-xAsr 1006

Using Cisco IOS by N/A?

Get instant alerts when new vulnerabilities affect Cisco IOS - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM6.5
Exploitation
CISA KEV
Exploit prediction
EPSS 2%
SSVC
Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score2.2%

EPSS (Exploit Prediction Scoring System) estimates a 2.2% chance this CVE is exploited in the wild within the next 30 days — higher than 82% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service.

Required Action
Apply updates per vendor instructions.
Ransomware Use
Unknown
Added to KEV
Mar 3, 2022
Remediation Due
Mar 24, 2022
1678 days overdue

Description

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a misclassification of Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc03809.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

15.0 ≤ v ≤ 15.6
cisco-1000-integrated-services-router (environment) · cisco-1100-4g-6g-integrated-services-router (environment) · cisco-1100-4g-integrated-services-router (environment) · cisco-1100-4gltegb-integrated-services-router (environment) · cisco-1100-4gltena-integrated-services-router (environment) · cisco-1100-8p-integrated-services-router (environment) · cisco-1100-integrated-services-router (environment) · cisco-1100-lte-integrated-services-router (environment) · cisco-1101-4p-integrated-services-router (environment) · cisco-1101-integrated-services-router (environment) · cisco-1109-2p-integrated-services-router (environment) · cisco-1109-4p-integrated-services-router (environment) · cisco-1109-integrated-services-router (environment) · cisco-1111x-8p-integrated-services-router (environment) · cisco-1111x-integrated-services-router (environment) · cisco-111x-integrated-services-router (environment) · cisco-1120-integrated-services-router (environment) · cisco-1131-integrated-services-router (environment) · cisco-1160-integrated-services-router (environment) · cisco-1801-integrated-service-router (environment) · cisco-1802-integrated-service-router (environment) · cisco-1803-integrated-service-router (environment) · cisco-1811-integrated-service-router (environment) · cisco-1812-integrated-service-router (environment) · cisco-1841-integrated-service-router (environment) · cisco-1861-integrated-service-router (environment) · cisco-1905-integrated-services-router (environment) · cisco-1906c-integrated-services-router (environment) · cisco-1921-integrated-services-router (environment) · cisco-1941-integrated-services-router (environment) · cisco-1941w-integrated-services-router (environment) · cisco-4000-integrated-services-router (environment) · cisco-422-integrated-services-router (environment) · cisco-4221-integrated-services-router (environment) · cisco-4321-integrated-services-router (environment) · cisco-4321-k9-integrated-services-router (environment) · cisco-4321-k9-rf-integrated-services-router (environment) · cisco-4321-k9-ws-integrated-services-router (environment) · cisco-4331-integrated-services-router (environment) · cisco-4331-k9-integrated-services-router (environment) · cisco-4331-k9-rf-integrated-services-router (environment) · cisco-4331-k9-ws-integrated-services-router (environment) · cisco-4351-integrated-services-router (environment) · cisco-4351-k9-integrated-services-router (environment) · cisco-4351-k9-rf-integrated-services-router (environment) · cisco-4351-k9-ws-integrated-services-router (environment) · cisco-4431-integrated-services-router (environment) · cisco-44461-integrated-services-router (environment) · cisco-4451-integrated-services-router (environment) · cisco-4451-x-integrated-services-router (environment) · cisco-4461-integrated-services-router (environment) · cisco-829-industrial-integrated-services-router (environment) · cisco-829-industrial-integrated-services-routers (environment) · cisco-829-integrated-services-router (environment) · cisco-860vae-w-integrated-services-router (environment) · cisco-861-integrated-services-router (environment) · cisco-861w-integrated-services-router (environment) · cisco-866vae-integrated-services-router (environment) · cisco-867-integrated-services-router (environment) · cisco-867vae-integrated-services-router (environment) · cisco-871-integrated-services-router (environment) · cisco-880-3g-integrated-services-router (environment) · cisco-880-voice-integrated-services-router (environment) · cisco-881-3g-integrated-services-router (environment) · cisco-881-cube-integrated-services-router (environment) · cisco-881-integrated-services-router (environment) · cisco-881w-integrated-services-router (environment) · cisco-886-integrated-services-router (environment) · cisco-886va-cube-integrated-services-router (environment) · cisco-886va-integrated-services-router (environment) · cisco-886va-w-integrated-services-router (environment) · cisco-886vag-3g-integrated-services-router (environment) · cisco-887-integrated-services-router (environment) · cisco-887v-integrated-services-router (environment) · cisco-887va-cube-integrated-services-router (environment) · cisco-887va-integrated-services-router (environment) · cisco-887va-w-integrated-services-router (environment) · cisco-887vag-3g-integrated-services-router (environment) · cisco-887vam-w-integrated-services-router (environment) · cisco-887vamg-3g-integrated-services-router (environment) · cisco-888-cube-integrated-services-router (environment) · cisco-888-integrated-services-router (environment) · cisco-888e-cube-integrated-services-router (environment) · cisco-888e-integrated-services-router (environment) · cisco-888eg-3g-integrated-services-router (environment) · cisco-888w-integrated-services-router (environment) · cisco-891-24x-integrated-services-router (environment) · cisco-891-integrated-services-router (environment) · cisco-891w-integrated-services-router (environment) · cisco-892-integrated-services-router (environment) · cisco-892f-cube-integrated-services-router (environment) · cisco-892w-integrated-services-router (environment) · cisco-asr-1000 (environment) · cisco-asr-1000-esp100 (environment) · cisco-asr-1000-esp100-x (environment) · cisco-asr-1000-esp200-x (environment) · cisco-asr-1000-x (environment) · cisco-asr-1001 (environment) · cisco-asr-1001-hx (environment) · cisco-asr-1001-hx-r (environment) · cisco-asr-1001-x (environment) · cisco-asr-1001-x-r (environment) · cisco-asr-1002 (environment) · cisco-asr-1002-hx (environment) · cisco-asr-1002-hx-r (environment) · cisco-asr-1002-x (environment) · cisco-asr-1002-x-r (environment) · cisco-asr-1004 (environment) · cisco-asr-1006 (environment) · cisco-asr-1006-x (environment) · cisco-asr-1009-x (environment) · cisco-asr-1013 (environment) · cisco-asr-1023 (environment) · cisco-catalyst-8200 (environment) · cisco-catalyst-8300 (environment) · cisco-catalyst-8300-1n1s-4t2x (environment) · cisco-catalyst-8300-1n1s-6t (environment) · cisco-catalyst-8300-2n2s-4t2x (environment) · cisco-catalyst-8300-2n2s-6t (environment) · cisco-catalyst-8500 (environment) · cisco-catalyst-8500-4qc (environment) · cisco-catalyst-8500l (environment) · cisco-catalyst-8510csr (environment) · cisco-catalyst-8510msr (environment) · cisco-catalyst-8540csr (environment) · cisco-catalyst-8540msr (environment) · cisco-cloud-services-router-1000v (environment) · cisco-integrated-services-virtual-router (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

References (4)

VDB Entryx_refsource_BIDBroken LinkThird Party Advisory
http://www.securityfocus.com/bid/101044
VDB Entryx_refsource_SECTRACKBroken LinkThird Party Advisory
http://www.securitytracker.com/id/1039452
US Government Resource
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12232

SSVC — Action Prioritization

SSVCActiveNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.5MEDIUMCISA-ADP
Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-399NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card