CVE-2017-12237

Cisco IOS and IOS XE software suffered a DoS vulnerability in its IKEv2 module that allowed unauthenticated remote attackers to crash devices, highlighting systemic unpatched flaws in foundational networking gear.

The vulnerability in Cisco's IKEv2 module allowed remote attackers to cause denial of service by crashing network devices, exposing DIB organizations to operational outages and compliance gaps if unpatched. This reflects a pattern of high-severity, unpatched vulnerabilities in Cisco's foundational networking software, requiring strict patch management and vendor accountability. DIBs must enforce continuous patching and consider supply-chain risk when relying on such critical infrastructure.

Shame score — A high-severity, actively exploited DoS flaw in foundational networking software that persisted long enough to enter the KEV catalog, reflecting systemic unpatched vulnerabilities in a critical supply chain.