CVE-2017-12232 : A vulnerability in the implementation of a protocol in Cisco Integrated Services

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a misclassification of Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc03809.

Published 2017-09-29 01:34:49

Updated 2025-01-27 19:23:29

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2017-12232

Cisco » IOS
Versions from including (>=) 15.0 and up to, including, (<=) 15.6
cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 1000 Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4g/6g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltegb Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltena Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-lte Integrated Services Router » Version: N/A
When used together with: Cisco » 1100 Integrated Services Router » Version: N/A
When used together with: Cisco » 1101-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1101 Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-2p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109 Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x Integrated Services Router » Version: N/A
When used together with: Cisco » 111x Integrated Services Router » Version: N/A
When used together with: Cisco » 1120 Integrated Services Router » Version: N/A
When used together with: Cisco » 1131 Integrated Services Router » Version: N/A
When used together with: Cisco » 1160 Integrated Services Router » Version: N/A
When used together with: Cisco » 1801 Integrated Service Router » Version: N/A
When used together with: Cisco » 1802 Integrated Service Router » Version: N/A
When used together with: Cisco » 1803 Integrated Service Router » Version: N/A
When used together with: Cisco » 1811 Integrated Service Router » Version: N/A
When used together with: Cisco » 1812 Integrated Service Router » Version: N/A
When used together with: Cisco » 1841 Integrated Service Router » Version: N/A
When used together with: Cisco » 1861 Integrated Service Router » Version: N/A
When used together with: Cisco » 1905 Integrated Services Router » Version: N/A
When used together with: Cisco » 1906c Integrated Services Router » Version: N/A
When used together with: Cisco » 1921 Integrated Services Router » Version: N/A
When used together with: Cisco » 1941 Integrated Services Router » Version: N/A
When used together with: Cisco » 1941w Integrated Services Router » Version: N/A
When used together with: Cisco » 4000 Integrated Services Router » Version: N/A
When used together with: Cisco » 422 Integrated Services Router » Version: N/A
When used together with: Cisco » 4221 Integrated Services Router » Version: N/A
When used together with: Cisco » 4321/k9-rf Integrated Services Router » Version: N/A
When used together with: Cisco » 4321/k9-ws Integrated Services Router » Version: N/A
When used together with: Cisco » 4321/k9 Integrated Services Router » Version: N/A
When used together with: Cisco » 4321 Integrated Services Router » Version: N/A
When used together with: Cisco » 4331/k9-rf Integrated Services Router » Version: N/A
When used together with: Cisco » 4331/k9-ws Integrated Services Router » Version: N/A
When used together with: Cisco » 4331/k9 Integrated Services Router » Version: N/A
When used together with: Cisco » 4331 Integrated Services Router » Version: N/A
When used together with: Cisco » 4351/k9-rf Integrated Services Router » Version: N/A
When used together with: Cisco » 4351/k9-ws Integrated Services Router » Version: N/A
When used together with: Cisco » 4351/k9 Integrated Services Router » Version: N/A
When used together with: Cisco » 4351 Integrated Services Router » Version: N/A
When used together with: Cisco » 4431 Integrated Services Router » Version: N/A
When used together with: Cisco » 44461 Integrated Services Router » Version: N/A
When used together with: Cisco » 4451-x Integrated Services Router » Version: N/A
When used together with: Cisco » 4451 Integrated Services Router » Version: N/A
When used together with: Cisco » 4461 Integrated Services Router » Version: N/A
When used together with: Cisco » 829 Industrial Integrated Services Router » Version: N/A
When used together with: Cisco » 829 Industrial Integrated Services Routers » Version: N/A
When used together with: Cisco » 829 Integrated Services Router » Version: N/A
When used together with: Cisco » 860vae-w Integrated Services Router » Version: N/A
When used together with: Cisco » 861 Integrated Services Router » Version: N/A
When used together with: Cisco » 861w Integrated Services Router » Version: N/A
When used together with: Cisco » 866vae Integrated Services Router » Version: N/A
When used together with: Cisco » 867 Integrated Services Router » Version: N/A
When used together with: Cisco » 867vae Integrated Services Router » Version: N/A
When used together with: Cisco » 871 Integrated Services Router » Version: N/A
When used together with: Cisco » 880-voice Integrated Services Router » Version: N/A
When used together with: Cisco » 880 3g Integrated Services Router » Version: N/A
When used together with: Cisco » 881-cube Integrated Services Router » Version: N/A
When used together with: Cisco » 881 3g Integrated Services Router » Version: N/A
When used together with: Cisco » 881 Integrated Services Router » Version: N/A
When used together with: Cisco » 881w Integrated Services Router » Version: N/A
When used together with: Cisco » 886 Integrated Services Router » Version: N/A
When used together with: Cisco » 886va-cube Integrated Services Router » Version: N/A
When used together with: Cisco » 886va-w Integrated Services Router » Version: N/A
When used together with: Cisco » 886va Integrated Services Router » Version: N/A
When used together with: Cisco » 886vag 3g Integrated Services Router » Version: N/A
When used together with: Cisco » 887 Integrated Services Router » Version: N/A
When used together with: Cisco » 887v Integrated Services Router » Version: N/A
When used together with: Cisco » 887va-cube Integrated Services Router » Version: N/A
When used together with: Cisco » 887va-w Integrated Services Router » Version: N/A
When used together with: Cisco » 887va Integrated Services Router » Version: N/A
When used together with: Cisco » 887vag 3g Integrated Services Router » Version: N/A
When used together with: Cisco » 887vam-w Integrated Services Router » Version: N/A
When used together with: Cisco » 887vamg 3g Integrated Services Router » Version: N/A
When used together with: Cisco » 888-cube Integrated Services Router » Version: N/A
When used together with: Cisco » 888 Integrated Services Router » Version: N/A
When used together with: Cisco » 888e-cube Integrated Services Router » Version: N/A
When used together with: Cisco » 888e Integrated Services Router » Version: N/A
When used together with: Cisco » 888eg 3g Integrated Services Router » Version: N/A
When used together with: Cisco » 888w Integrated Services Router » Version: N/A
When used together with: Cisco » 891-24x Integrated Services Router » Version: N/A
When used together with: Cisco » 891 Integrated Services Router » Version: N/A
When used together with: Cisco » 891w Integrated Services Router » Version: N/A
When used together with: Cisco » 892 Integrated Services Router » Version: N/A
When used together with: Cisco » 892f-cube Integrated Services Router » Version: N/A
When used together with: Cisco » 892w Integrated Services Router » Version: N/A
When used together with: Cisco » Asr 1000 » Version: N/A
When used together with: Cisco » Asr 1000-esp100 » Version: N/A
When used together with: Cisco » Asr 1000-esp100-x » Version: N/A
When used together with: Cisco » Asr 1000-esp200-x » Version: N/A
When used together with: Cisco » Asr 1000-x » Version: N/A
When used together with: Cisco » Asr 1000 » Version: N/A
When used together with: Cisco » Asr 1001 » Version: N/A
When used together with: Cisco » Asr 1001-hx » Version: N/A
When used together with: Cisco » Asr 1001-hx R » Version: N/A
When used together with: Cisco » Asr 1001-x » Version: N/A
When used together with: Cisco » Asr 1001-x R » Version: N/A
When used together with: Cisco » Asr 1002 » Version: N/A
When used together with: Cisco » Asr 1002-hx » Version: N/A
When used together with: Cisco » Asr 1002-hx R » Version: N/A
When used together with: Cisco » Asr 1002-x » Version: N/A
When used together with: Cisco » Asr 1002-x R » Version: N/A
When used together with: Cisco » Asr 1004 » Version: N/A
When used together with: Cisco » Asr 1006 » Version: N/A
When used together with: Cisco » Asr 1006-x » Version: N/A
When used together with: Cisco » Asr 1009-x » Version: N/A
When used together with: Cisco » Asr 1013 » Version: N/A
When used together with: Cisco » Asr 1023 » Version: N/A
When used together with: Cisco » Catalyst 8200 » Version: N/A
When used together with: Cisco » Catalyst 8300 » Version: N/A
When used together with: Cisco » Catalyst 8300-1n1s-4t2x » Version: N/A
When used together with: Cisco » Catalyst 8300-1n1s-6t » Version: N/A
When used together with: Cisco » Catalyst 8300-2n2s-4t2x » Version: N/A
When used together with: Cisco » Catalyst 8300-2n2s-6t » Version: N/A
When used together with: Cisco » Catalyst 8500 » Version: N/A
When used together with: Cisco » Catalyst 8500-4qc » Version: N/A
When used together with: Cisco » Catalyst 8500l » Version: N/A
When used together with: Cisco » Catalyst 8510csr » Version: N/A
When used together with: Cisco » Catalyst 8510msr » Version: N/A
When used together with: Cisco » Catalyst 8540csr » Version: N/A
When used together with: Cisco » Catalyst 8540msr » Version: N/A
When used together with: Cisco » Cloud Services Router 1000v » Version: N/A
When used together with: Cisco » Integrated Services Virtual Router » Version: N/A

CVE-2017-12232 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service.

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2017-12232

Added on 2022-03-03 Action due date 2022-03-24

Exploit prediction scoring system (EPSS) score for CVE-2017-12232

EPSS FAQ

1.58%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 80 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-12232

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.1	MEDIUM	AV:A/AC:L/Au:N/C:N/I:N/A:C	6.5	6.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
6.5	MEDIUM	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST	2024-07-16
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2017-12232

CWE-399
Assigned by:
- psirt@cisco.com (Secondary)
- ykramarz@cisco.com (Secondary)

References for CVE-2017-12232

http://www.securityfocus.com/bid/101044

Cisco IOS Software CVE-2017-12232 Denial of Service Vulnerability
Broken Link;Third Party Advisory;VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-rbip-dos

Cisco IOS Software for Cisco Integrated Services Routers Generation 2 Denial of Service Vulnerability
Vendor Advisory
http://www.securitytracker.com/id/1039452

Cisco Industrial Integrated Services Routers G2 Ethernet Classification Error Lets Remote Users Cause the Target System to Reload - SecurityTracker
Broken Link;Third Party Advisory;VDB Entry