CVE-2017-12238

An unauthenticated adjacent attacker could cause a denial-of-service on Cisco Catalyst 6800 Series Switches via a VPLS code vulnerability.

A denial-of-service vulnerability in the VPLS code of Cisco IOS for Catalyst 6800 Series Switches allowed an unauthenticated adjacent attacker to disrupt network services. DIB organizations must ensure these switches are patched, as unpatched instances remain in the KEV catalog and can be exploited in the wild, impacting network availability and compliance with availability requirements.

Shame score — The vulnerability was actively exploited in the wild and cataloged in KEV, indicating a known, unpatched flaw that caused service disruption, though it did not result in data exfiltration or ransomware.