Skip to content
COOEY

EXPOSURES › CVE-2017-12232

CVE-2017-12232

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-03-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2017-12232 ↗
⌖ EXPLOITED IN THE WILD SHAME 65/100 exploited-in-wildunpatched

An unauthenticated adjacent attacker could force Cisco ISR G2 routers to reload via a DoS vulnerability in Cisco IOS.

Cisco IOS software on ISR G2 routers had a DoS vulnerability allowing an unauthenticated adjacent attacker to cause a device reload. This is a KEV-listed, actively exploited flaw that impacts network availability and complicates compliance with NIST 800-171 controls requiring mitigation of known vulnerabilities. DIB organizations must ensure all Cisco IOS devices are patched to prevent service disruption and maintain compliance.

Shame score — A known, actively exploited DoS vulnerability in widely deployed network hardware that could be leveraged by attackers to disrupt critical infrastructure.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Cisco Systems Inc. · vendorIOS · product
DESCRIPTION

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.60
Cisco faced severe fallout for CVE-2017-12232, a DoS vulnerability in ISR G2 routers allowing unauthenticated attackers to cause device reboots, widely criticized for the delay in patching and the sev
cooey ↗ severe-fallout -0.60
Severe fallout due to the unauthenticated DoS vulnerability in critical enterprise routers, with delayed patching and widespread impact on network availability.
"A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service."
AFFECTED FEDRAMP PRODUCTS · 9
PRODUCTSTATUS
AppDynamics GovAPM
AppDynamics (a Cisco company)
 Authorized
Cisco Cloudlock for Government
Cisco Systems Inc.
 Authorized
Cisco Meraki for Government
Cisco Systems Inc.
 In Process
Cisco SD-WAN for Government
Cisco Systems Inc.
 In Process
Cisco Umbrella for Government
Cisco Systems Inc.
 In Process
Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government)
Cisco Systems Inc.
 Authorized
Duo Federal
Duo Security (A Cisco Company)
 Authorized
WebEx Contact Center Enterprise for Government (WxCCE-G)
Cisco Systems Inc.
 In Process
Webex for Government
Cisco Systems Inc.
 Authorized