CVE-2017-12231 : A vulnerability in the implementation of Network Address Translation (NAT) funct

A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper translation of H.323 messages that use the Registration, Admission, and Status (RAS) protocol and are sent to an affected device via IPv4 packets. An attacker could exploit this vulnerability by sending a crafted H.323 RAS packet through an affected device. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition. This vulnerability affects Cisco devices that are configured to use an application layer gateway with NAT (NAT ALG) for H.323 RAS messages. By default, a NAT ALG is enabled for H.323 RAS messages. Cisco Bug IDs: CSCvc57217.

Published 2017-09-29 01:34:49

Updated 2025-01-27 19:23:23

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2017-12231

Cisco » IOS
Versions from including (>=) 12.4 and up to, including, (<=) 15.6
cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 1100-4g/6g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltegb Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltena Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-6g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-lte Integrated Services Router » Version: N/A
When used together with: Cisco » 1100 Integrated Services Router » Version: N/A
When used together with: Cisco » 1100 Terminal Services Gateways » Version: N/A
When used together with: Cisco » 1101-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1101 Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-2p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109 Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 111x Integrated Services Router » Version: N/A
When used together with: Cisco » 1120 Integrated Services Router » Version: N/A
When used together with: Cisco » 1131 Integrated Services Router » Version: N/A
When used together with: Cisco » 1160 Integrated Services Router » Version: N/A
When used together with: Cisco » 1801 Integrated Service Router » Version: N/A
When used together with: Cisco » 1802 Integrated Service Router » Version: N/A
When used together with: Cisco » 1803 Integrated Service Router » Version: N/A
When used together with: Cisco » 1811 Integrated Service Router » Version: N/A
When used together with: Cisco » 1812 Integrated Service Router » Version: N/A
When used together with: Cisco » 1841 Integrated Service Router » Version: N/A
When used together with: Cisco » 1861 Integrated Service Router » Version: N/A
When used together with: Cisco » 1905 Integrated Services Router » Version: N/A
When used together with: Cisco » 1906c Integrated Services Router » Version: N/A
When used together with: Cisco » 1921 Integrated Services Router » Version: N/A
When used together with: Cisco » 1941 Integrated Services Router » Version: N/A
When used together with: Cisco » 1941w Integrated Services Router » Version: N/A
When used together with: Cisco » 4000 Integrated Services Router » Version: N/A
When used together with: Cisco » 4221 Integrated Services Router » Version: N/A
When used together with: Cisco » 8101-32fh » Version: N/A
When used together with: Cisco » 8101-32h » Version: N/A
When used together with: Cisco » 8102-64h » Version: N/A
When used together with: Cisco » 8201 » Version: N/A
When used together with: Cisco » 8201-32fh » Version: N/A
When used together with: Cisco » 8202 » Version: N/A
When used together with: Cisco » 8208 » Version: N/A
When used together with: Cisco » 8212 » Version: N/A
When used together with: Cisco » 8218 » Version: N/A
When used together with: Cisco » 8800 12-slot » Version: N/A
When used together with: Cisco » 8800 18-slot » Version: N/A
When used together with: Cisco » 8800 4-slot » Version: N/A
When used together with: Cisco » 8800 8-slot » Version: N/A
When used together with: Cisco » 8804 » Version: N/A
When used together with: Cisco » 8808 » Version: N/A
When used together with: Cisco » 8812 » Version: N/A
When used together with: Cisco » 8818 » Version: N/A
When used together with: Cisco » 9800-40 » Version: N/A
When used together with: Cisco » 9800-80 » Version: N/A
When used together with: Cisco » 9800-cl » Version: N/A
When used together with: Cisco » 9800-l » Version: N/A
When used together with: Cisco » Asr 1000 » Version: N/A
When used together with: Cisco » Asr 1000-esp100 » Version: N/A
When used together with: Cisco » Asr 1000-esp100-x » Version: N/A
When used together with: Cisco » Asr 1000-esp200-x » Version: N/A
When used together with: Cisco » Asr 1001 » Version: N/A
When used together with: Cisco » Asr 1001-hx » Version: N/A
When used together with: Cisco » Asr 1001-hx R » Version: N/A
When used together with: Cisco » Asr 1001-x » Version: N/A
When used together with: Cisco » Asr 1001-x R » Version: N/A
When used together with: Cisco » Asr 1002-hx » Version: N/A
When used together with: Cisco » Asr 1002-hx R » Version: N/A
When used together with: Cisco » Asr 1002-x » Version: N/A
When used together with: Cisco » Asr 1002-x R » Version: N/A
When used together with: Cisco » Asr 1002 Fixed Router » Version: N/A
When used together with: Cisco » Asr 1004 » Version: N/A
When used together with: Cisco » Asr 1006 » Version: N/A
When used together with: Cisco » Asr 1006-x » Version: N/A
When used together with: Cisco » Asr 1009-x » Version: N/A
When used together with: Cisco » Asr 1013 » Version: N/A
When used together with: Cisco » Asr 1023 » Version: N/A
When used together with: Cisco » Asr 900 » Version: N/A
When used together with: Cisco » Asr 9000 » Version: N/A
When used together with: Cisco » Asr 9000v » Version: N/A
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 901-12c-f-d » Version: N/A
When used together with: Cisco » Asr 901-12c-ft-d » Version: N/A
When used together with: Cisco » Asr 901-4c-f-d » Version: N/A
When used together with: Cisco » Asr 901-4c-ft-d » Version: N/A
When used together with: Cisco » Asr 901-6cz-f-a » Version: N/A
When used together with: Cisco » Asr 901-6cz-f-d » Version: N/A
When used together with: Cisco » Asr 901-6cz-fs-a » Version: N/A
When used together with: Cisco » Asr 901-6cz-fs-d » Version: N/A
When used together with: Cisco » Asr 901-6cz-ft-a » Version: N/A
When used together with: Cisco » Asr 901-6cz-ft-d » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 901s-2sg-f-ah » Version: N/A
When used together with: Cisco » Asr 901s-2sg-f-d » Version: N/A
When used together with: Cisco » Asr 901s-3sg-f-ah » Version: N/A
When used together with: Cisco » Asr 901s-3sg-f-d » Version: N/A
When used together with: Cisco » Asr 901s-4sg-f-d » Version: N/A
When used together with: Cisco » Asr 902 » Version: N/A
When used together with: Cisco » Asr 902u » Version: N/A
When used together with: Cisco » Asr 903 » Version: N/A
When used together with: Cisco » Asr 907 » Version: N/A
When used together with: Cisco » Asr 914 » Version: N/A
When used together with: Cisco » Asr 920-10sz-pd » Version: N/A
When used together with: Cisco » Asr 920-10sz-pd R » Version: N/A
When used together with: Cisco » Asr 920-12cz-a » Version: N/A
When used together with: Cisco » Asr 920-12cz-a R » Version: N/A
When used together with: Cisco » Asr 920-12cz-d » Version: N/A
When used together with: Cisco » Asr 920-12cz-d R » Version: N/A
When used together with: Cisco » Asr 920-12sz-im » Version: N/A
When used together with: Cisco » Asr 920-12sz-im R » Version: N/A
When used together with: Cisco » Asr 920-24sz-im » Version: N/A
When used together with: Cisco » Asr 920-24sz-im R » Version: N/A
When used together with: Cisco » Asr 920-24sz-m » Version: N/A
When used together with: Cisco » Asr 920-24sz-m R » Version: N/A
When used together with: Cisco » Asr 920-24tz-m » Version: N/A
When used together with: Cisco » Asr 920-24tz-m R » Version: N/A
When used together with: Cisco » Asr 920-4sz-a » Version: N/A
When used together with: Cisco » Asr 920-4sz-a R » Version: N/A
When used together with: Cisco » Asr 920-4sz-d » Version: N/A
When used together with: Cisco » Asr 920-4sz-d R » Version: N/A
When used together with: Cisco » Asr 920u-12sz-im » Version: N/A
When used together with: Cisco » Asr 9901 » Version: N/A
When used together with: Cisco » Asr 9902 » Version: N/A
When used together with: Cisco » Asr 9903 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9906 » Version: N/A
When used together with: Cisco » Asr 9910 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9920 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
When used together with: Cisco » Catalyst 3650 » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-s » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq-e » Version: N/A

Max 200 conditions are displayed on this page, to prevent potential performance issues, please refer to NVD for more details.

CVE-2017-12231 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS could allow an unauthenticated, remote attacker to cause a denial of service.

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2017-12231

Added on 2022-03-03 Action due date 2022-03-24

Exploit prediction scoring system (EPSS) score for CVE-2017-12231

EPSS FAQ

10.85%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 93 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-12231

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST	2024-07-16
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2017-12231

CWE-399
Assigned by:
- psirt@cisco.com (Secondary)
- ykramarz@cisco.com (Secondary)

References for CVE-2017-12231

http://www.securityfocus.com/bid/101039

Cisco IOS Software CVE-2017-12231 Remote Denial of Service Vulnerability
Broken Link;Third Party Advisory;VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-nat

Cisco IOS Software Network Address Translation Denial of Service Vulnerability
Vendor Advisory
http://www.securitytracker.com/id/1039449

Cisco IOS H.323 NAT Processing Flaw Lets Remote Users Cause the Target System to Reload - SecurityTracker
Broken Link;Third Party Advisory;VDB Entry