Skip to content
COOEY

EXPOSURES › CVE-2017-12231

CVE-2017-12231

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-03-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2017-12231 ↗
⌖ EXPLOITED IN THE WILD SHAME 45/100 exploited-in-wildunpatched

Cisco IOS NAT DoS vulnerability allowed unauthenticated remote attackers to cause denial of service.

An unauthenticated remote attacker could exploit a flaw in Cisco IOS NAT implementation to crash devices, causing service disruption. DIB orgs must ensure all network infrastructure is patched against known KEV vulnerabilities to prevent operational outages and maintain compliance with security baselines.

Shame score — A known DoS vulnerability in widely deployed network infrastructure that was actively exploited in the KEV list, indicating a failure to patch known issues.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Cisco Systems Inc. · vendorIOS · product
DESCRIPTION

A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS could allow an unauthenticated, remote attacker to cause a denial of service.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.60
Cisco's NAT DoS flaw (CVE-2017-12231) is a remote, unauthenticated DoS vulnerability in IOS NAT, reflecting poor implementation and lack of timely mitigation, though no severe fallout or condemnation
cooey ↗ severe-fallout -0.60
NAT DoS flaw in IOS reflects poor implementation and lack of timely mitigation, though no severe fallout or condemnation is explicitly detailed in the provided sources.
"A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS could allow an unauthenticated, remote attacker to cause a denial of service."
talosintelligence.com ↗ severe-fallout +0.00
No specific sentiment toward Cisco for CVE-2017-12231 is expressed; the source is a general vulnerability reporting page.
recentbreaches.com ↗ severe-fallout +0.00
No specific sentiment toward Cisco for CVE-2017-12231 is expressed; the source is a general breach tracker.
www.cvefind.com ↗ severe-fallout +0.00
No specific sentiment toward Cisco for CVE-2017-12231 is expressed; the source is a general CVE database.
app.opencve.io ↗ severe-fallout +0.00
No specific sentiment toward Cisco for CVE-2017-12231 is expressed; the source is a general CVE database.
cvefeed.io ↗ severe-fallout +0.00
No specific sentiment toward Cisco for CVE-2017-12231 is expressed; the source is a general CVE database.
gbhackers.com ↗ severe-fallout +0.00
No specific sentiment toward Cisco for CVE-2017-12231 is expressed; the source discusses a different CVE (CVE-2026-20079) in Cisco FMC.
AFFECTED FEDRAMP PRODUCTS · 9
PRODUCTSTATUS
AppDynamics GovAPM
AppDynamics (a Cisco company)
 Authorized
Cisco Cloudlock for Government
Cisco Systems Inc.
 Authorized
Cisco Meraki for Government
Cisco Systems Inc.
 In Process
Cisco SD-WAN for Government
Cisco Systems Inc.
 In Process
Cisco Umbrella for Government
Cisco Systems Inc.
 In Process
Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government)
Cisco Systems Inc.
 Authorized
Duo Federal
Duo Security (A Cisco Company)
 Authorized
WebEx Contact Center Enterprise for Government (WxCCE-G)
Cisco Systems Inc.
 In Process
Webex for Government
Cisco Systems Inc.
 Authorized