EXPOSURES › CVE-2017-12235
CVE-2017-12235
HIGH ⌖ ON CISA KEV · EXPLOITEDAn unauthenticated remote attacker could cause Cisco Industrial Ethernet switches to reload via a PROFINET protocol vulnerability, causing denial of service.
Cisco IOS software for Industrial Ethernet switches contained a PROFINET protocol vulnerability allowing remote denial of service through device reboots. DIB organizations must ensure industrial network infrastructure is patched against actively exploited vulnerabilities to prevent operational disruption and maintain compliance with security baselines.
Shame score — The vulnerability was actively exploited in the wild (KEV) and affected industrial control systems, representing a significant operational risk despite not being a zero-day or RCE.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.
"A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service."
"Exploited BIG-IP APM Vulnerability CVE-2026-94127 Fixed"
"Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Find"
"Vulnpedia — Vulnerability Reference, Triage & PoC Finder"
"Vulnerability Reports - Latest network security threats and zeroday ..."
"Weekly Cybersecurity Newsletter Bulletin – Cisco and Android 0-Day, BragJack Attack, Claude Opus 5 Used to Hack OpenAI, and 20+ Stories"
"CVEs of the Week Loading CVEs of the Week... No new CVEs this week."
| PRODUCT | STATUS |
|---|---|
| AppDynamics GovAPM AppDynamics (a Cisco company) |
Authorized |
| Cisco Cloudlock for Government Cisco Systems Inc. |
Authorized |
| Cisco Meraki for Government Cisco Systems Inc. |
In Process |
| Cisco SD-WAN for Government Cisco Systems Inc. |
In Process |
| Cisco Umbrella for Government Cisco Systems Inc. |
In Process |
| Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc. |
Authorized |
| Duo Federal Duo Security (A Cisco Company) |
Authorized |
| WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc. |
In Process |
| Webex for Government Cisco Systems Inc. |
Authorized |