CVE-2017-12233 : Multiple vulnerabilities in the implementation of the Common Industrial Protocol

Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuz95334.

Published 2017-09-29 01:34:49

Updated 2024-07-16 17:28:26

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2017-12233

Cisco » IOS
Versions from including (>=) 12.4 and up to, including, (<=) 15.6
cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 1000 Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4g/6g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltegb Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltena Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4p » Version: N/A
When used together with: Cisco » 1100-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-6g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-8p » Version: N/A
When used together with: Cisco » 1100-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-lte Integrated Services Router » Version: N/A
When used together with: Cisco » 1100 Integrated Services Router » Version: N/A
When used together with: Cisco » 1100 Terminal Services Gateways » Version: N/A
When used together with: Cisco » 1101-4p » Version: N/A
When used together with: Cisco » 1101-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1101 Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-2p » Version: N/A
When used together with: Cisco » 1109-4p » Version: N/A
When used together with: Cisco » 1111-4pwe » Version: N/A
When used together with: Cisco » 1111-8pwb » Version: N/A
When used together with: Cisco » 1111x-8p » Version: N/A
When used together with: Cisco » 1113-8plteeawe » Version: N/A
When used together with: Cisco » 1113-8pmwe » Version: N/A
When used together with: Cisco » 1113-8pwe » Version: N/A
When used together with: Cisco » 1116-4plteeawe » Version: N/A
When used together with: Cisco » 1116-4pwe » Version: N/A
When used together with: Cisco » 1117-4plteeawe » Version: N/A
When used together with: Cisco » 1117-4pmlteeawe » Version: N/A
When used together with: Cisco » 1117-4pmwe » Version: N/A
When used together with: Cisco » 1117-4pwe » Version: N/A
When used together with: Cisco » 1120 » Version: N/A
When used together with: Cisco » 1120 Connected Grid Router » Version: N/A
When used together with: Cisco » 1120 Integrated Services Router » Version: N/A
When used together with: Cisco » 1131 Integrated Services Router » Version: N/A
When used together with: Cisco » 1160 Integrated Services Router » Version: N/A
When used together with: Cisco » 1801 Integrated Service Router » Version: N/A
When used together with: Cisco » 1802 Integrated Service Router » Version: N/A
When used together with: Cisco » 1803 Integrated Service Router » Version: N/A
When used together with: Cisco » 1811 Integrated Service Router » Version: N/A
When used together with: Cisco » 1812 Integrated Service Router » Version: N/A
When used together with: Cisco » 1841 Integrated Service Router » Version: N/A
When used together with: Cisco » 1861 Integrated Service Router » Version: N/A
When used together with: Cisco » 1905 Integrated Services Router » Version: N/A
When used together with: Cisco » 1906c Integrated Services Router » Version: N/A
When used together with: Cisco » 1921 Integrated Services Router » Version: N/A
When used together with: Cisco » 1941 Integrated Services Router » Version: N/A
When used together with: Cisco » 1941w Integrated Services Router » Version: N/A
When used together with: Cisco » Catalyst Ie3200 Rugged Switch » Version: N/A
When used together with: Cisco » Catalyst Ie3300 Rugged Switch » Version: N/A
When used together with: Cisco » Catalyst Ie3400 Heavy Duty Switch » Version: N/A
When used together with: Cisco » Catalyst Ie3400 Rugged Switch » Version: N/A
When used together with: Cisco » Catalyst Ie9300 » Version: N/A
When used together with: Cisco » Esr-6300-con-k9 » Version: N/A
When used together with: Cisco » Esr-6300-ncp-k9 » Version: N/A

CVE-2017-12233 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2017-12233

Added on 2022-03-03 Action due date 2022-03-24

Exploit prediction scoring system (EPSS) score for CVE-2017-12233

EPSS FAQ

0.35%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 72 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-12233

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST	2024-07-16
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2017-12233

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Assigned by:
- nvd@nist.gov (Primary)
- ykramarz@cisco.com (Secondary)

References for CVE-2017-12233

http://www.securitytracker.com/id/1039459

Cisco IOS Common Industrial Protocol Implementation Bugs Let Remote Users Cause the Target System to Reload - SecurityTracker
Broken Link;Third Party Advisory;VDB Entry

CVEs referencing this url
http://www.securityfocus.com/bid/101038

Cisco IOS Software Common Industrial Protocol Multiple Denial of Service Vulnerabilities
Broken Link;Third Party Advisory;VDB Entry

CVEs referencing this url
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-cip

Cisco IOS Software Common Industrial Protocol Request Denial of Service Vulnerabilities
Vendor Advisory

CVEs referencing this url