6.5

CVE-2017-12232

Warning

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a misclassification of Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc03809.

Data is provided by the National Vulnerability Database (NVD)
CiscoIos Version >= 15.0 <= 15.6
   Cisco1000 Integrated Services Router Version-
   Cisco1100-4g Integrated Services Router Version-
   Cisco1100-4gltegb Integrated Services Router Version-
   Cisco1100-4gltena Integrated Services Router Version-
   Cisco1100-8p Integrated Services Router Version-
   Cisco1100-lte Integrated Services Router Version-
   Cisco1100 Integrated Services Router Version-
   Cisco1101-4p Integrated Services Router Version-
   Cisco1101 Integrated Services Router Version-
   Cisco1109-2p Integrated Services Router Version-
   Cisco1109-4p Integrated Services Router Version-
   Cisco1109 Integrated Services Router Version-
   Cisco1111x-8p Integrated Services Router Version-
   Cisco1111x Integrated Services Router Version-
   Cisco111x Integrated Services Router Version-
   Cisco1120 Integrated Services Router Version-
   Cisco1131 Integrated Services Router Version-
   Cisco1160 Integrated Services Router Version-
   Cisco1801 Integrated Service Router Version-
   Cisco1802 Integrated Service Router Version-
   Cisco1803 Integrated Service Router Version-
   Cisco1811 Integrated Service Router Version-
   Cisco1812 Integrated Service Router Version-
   Cisco1841 Integrated Service Router Version-
   Cisco1861 Integrated Service Router Version-
   Cisco1905 Integrated Services Router Version-
   Cisco1906c Integrated Services Router Version-
   Cisco1921 Integrated Services Router Version-
   Cisco1941 Integrated Services Router Version-
   Cisco1941w Integrated Services Router Version-
   Cisco4000 Integrated Services Router Version-
   Cisco422 Integrated Services Router Version-
   Cisco4221 Integrated Services Router Version-
   Cisco4321 Integrated Services Router Version-
   Cisco4331 Integrated Services Router Version-
   Cisco4351 Integrated Services Router Version-
   Cisco4431 Integrated Services Router Version-
   Cisco44461 Integrated Services Router Version-
   Cisco4451-x Integrated Services Router Version-
   Cisco4451 Integrated Services Router Version-
   Cisco4461 Integrated Services Router Version-
   Cisco829 Industrial Integrated Services Router Version-
   Cisco829 Industrial Integrated Services Routers Version-
   Cisco829 Integrated Services Router Version-
   Cisco860vae-w Integrated Services Router Version-
   Cisco861 Integrated Services Router Version-
   Cisco861w Integrated Services Router Version-
   Cisco866vae Integrated Services Router Version-
   Cisco867 Integrated Services Router Version-
   Cisco867vae Integrated Services Router Version-
   Cisco871 Integrated Services Router Version-
   Cisco880-voice Integrated Services Router Version-
   Cisco880 3g Integrated Services Router Version-
   Cisco881-cube Integrated Services Router Version-
   Cisco881 3g Integrated Services Router Version-
   Cisco881 Integrated Services Router Version-
   Cisco881w Integrated Services Router Version-
   Cisco886 Integrated Services Router Version-
   Cisco886va-cube Integrated Services Router Version-
   Cisco886va-w Integrated Services Router Version-
   Cisco886va Integrated Services Router Version-
   Cisco886vag 3g Integrated Services Router Version-
   Cisco887 Integrated Services Router Version-
   Cisco887v Integrated Services Router Version-
   Cisco887va-cube Integrated Services Router Version-
   Cisco887va-w Integrated Services Router Version-
   Cisco887va Integrated Services Router Version-
   Cisco887vag 3g Integrated Services Router Version-
   Cisco887vam-w Integrated Services Router Version-
   Cisco887vamg 3g Integrated Services Router Version-
   Cisco888-cube Integrated Services Router Version-
   Cisco888 Integrated Services Router Version-
   Cisco888e-cube Integrated Services Router Version-
   Cisco888e Integrated Services Router Version-
   Cisco888eg 3g Integrated Services Router Version-
   Cisco888w Integrated Services Router Version-
   Cisco891-24x Integrated Services Router Version-
   Cisco891 Integrated Services Router Version-
   Cisco891w Integrated Services Router Version-
   Cisco892 Integrated Services Router Version-
   Cisco892f-cube Integrated Services Router Version-
   Cisco892w Integrated Services Router Version-
   CiscoAsr 1000 Version-
   CiscoAsr 1000-esp100 Version-
   CiscoAsr 1000-esp100-x Version-
   CiscoAsr 1000-esp200-x Version-
   CiscoAsr 1000-x Version-
   CiscoAsr 1000 Version-
   CiscoAsr 1001 Version-
   CiscoAsr 1001-hx Version-
   CiscoAsr 1001-hx R Version-
   CiscoAsr 1001-x Version-
   CiscoAsr 1001-x R Version-
   CiscoAsr 1002 Version-
   CiscoAsr 1002-hx Version-
   CiscoAsr 1002-hx R Version-
   CiscoAsr 1002-x Version-
   CiscoAsr 1002-x R Version-
   CiscoAsr 1004 Version-
   CiscoAsr 1006 Version-
   CiscoAsr 1006-x Version-
   CiscoAsr 1009-x Version-
   CiscoAsr 1013 Version-
   CiscoAsr 1023 Version-
   CiscoCatalyst 8200 Version-
   CiscoCatalyst 8300 Version-
   CiscoCatalyst 8300-1n1s-4t2x Version-
   CiscoCatalyst 8300-1n1s-6t Version-
   CiscoCatalyst 8300-2n2s-4t2x Version-
   CiscoCatalyst 8300-2n2s-6t Version-
   CiscoCatalyst 8500 Version-
   CiscoCatalyst 8500-4qc Version-
   CiscoCatalyst 8500l Version-
   CiscoCatalyst 8510csr Version-
   CiscoCatalyst 8510msr Version-
   CiscoCatalyst 8540csr Version-
   CiscoCatalyst 8540msr Version-
   CiscoCloud Services Router 1000v Version-
   CiscoIntegrated Services Virtual Router Version-

03.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability

Vulnerability

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service.

Description

Apply updates per vendor instructions.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.14% 0.835
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 6.1 6.5 6.9
AV:A/AC:L/Au:N/C:N/I:N/A:C