← Back to CVE List
Vulnerability Intelligence Report
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

CVE-2017-12233

Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuz95334.

CISA KEV SSVC: Active Exploitation Automatable
CVSS Base Score
7.5
HIGH
Exploitability:3.9
Impact Score:3.6
EPSS Probability:6.94%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Weaknesses (CWE)

Affected Products & Versions

Vendor Product Affected Versions
cisco ios all
cisco 1000_integrated_services_router all
cisco 1100-4g\/6g_integrated_services_router all
cisco 1100-4g_integrated_services_router all
cisco 1100-4gltegb_integrated_services_router all
cisco 1100-4gltena_integrated_services_router all
cisco 1100-4p all
cisco 1100-4p_integrated_services_router all
cisco 1100-6g_integrated_services_router all
cisco 1100-8p all
cisco 1100-8p_integrated_services_router all
cisco 1100-lte_integrated_services_router all
cisco 1100_integrated_services_router all
cisco 1100_terminal_services_gateways all
cisco 1101-4p all
cisco 1101-4p_integrated_services_router all
cisco 1101_integrated_services_router all
cisco 1109-2p all
cisco 1109-4p all
cisco 1111-4pwe all
cisco 1111-8pwb all
cisco 1111x-8p all
cisco 1113-8plteeawe all
cisco 1113-8pmwe all
cisco 1113-8pwe all
cisco 1116-4plteeawe all
cisco 1116-4pwe all
cisco 1117-4plteeawe all
cisco 1117-4pmlteeawe all
cisco 1117-4pmwe all
cisco 1117-4pwe all
cisco 1120 all
cisco 1120_connected_grid_router all
cisco 1120_integrated_services_router all
cisco 1131_integrated_services_router all
cisco 1160_integrated_services_router all
cisco 1801_integrated_service_router all
cisco 1802_integrated_service_router all
cisco 1803_integrated_service_router all
cisco 1811_integrated_service_router all
cisco 1812_integrated_service_router all
cisco 1841_integrated_service_router all
cisco 1861_integrated_service_router all
cisco 1905_integrated_services_router all
cisco 1906c_integrated_services_router all
cisco 1921_integrated_services_router all
cisco 1941_integrated_services_router all
cisco 1941w_integrated_services_router all
cisco catalyst_ie3200_rugged_switch all
cisco catalyst_ie3300_rugged_switch all
cisco catalyst_ie3400_heavy_duty_switch all
cisco catalyst_ie3400_rugged_switch all
cisco catalyst_ie9300 all
cisco esr-6300-con-k9 all
cisco esr-6300-ncp-k9 all

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

CISA KEV
ACTIVE IN CATALOG
EPSS Score
6.938%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityCisco Systems, Inc. · Hosted Service · USA
Reserved2017-08-03T00:00:00
Published2017-09-28T07:00:00
Patch Date2017-09-28
Last Updated2026-01-12T21:41:58

LINK COPIED TO CLIPBOARD