CVE-2017-12232: Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
Published Sep 28, 2017
·Updated
A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a misclassification of Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc03809.
Other sources
A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service.
— CISA
Affected Software
386 affected components
Cisco IOS Software
Cisco IOS=12.4\(25e\)jao3a
Cisco IOS=12.4\(25e\)jao20s
Cisco IOS=12.4\(25e\)jap1n
Cisco IOS=12.4\(25e\)jap9
Cisco IOS=15.0\(2\)sqd7
Cisco IOS=15.1\(2\)sg7a
Cisco IOS=15.1\(4\)gc
Cisco IOS=15.1\(4\)gc1
Cisco IOS=15.1\(4\)gc2
Cisco IOS=15.1\(4\)m
Cisco IOS=15.1\(4\)m1
Cisco IOS=15.1\(4\)m2
Cisco IOS=15.1\(4\)m3
Cisco IOS=15.1\(4\)m3a
Cisco IOS=15.1\(4\)m4
Cisco IOS=15.1\(4\)m5
Cisco IOS=15.1\(4\)m6
Cisco IOS=15.1\(4\)m7
Cisco IOS=15.1\(4\)m8
Cisco IOS=15.1\(4\)m9
Cisco IOS=15.1\(4\)m10
Cisco IOS=15.2\(1\)gc
Cisco IOS=15.2\(1\)gc1
Cisco IOS=15.2\(1\)gc2
Cisco IOS=15.2\(1\)t
Cisco IOS=15.2\(1\)t1
Cisco IOS=15.2\(1\)t2
Cisco IOS=15.2\(1\)t3
Cisco IOS=15.2\(1\)t3a
Cisco IOS=15.2\(1\)t4
Cisco IOS=15.2\(2\)e3
Cisco IOS=15.2\(2\)e5b
Cisco IOS=15.2\(2\)gc
Cisco IOS=15.2\(2\)ja
Cisco IOS=15.2\(2\)ja1
Cisco IOS=15.2\(2\)jax
Cisco IOS=15.2\(2\)jax1
Cisco IOS=15.2\(2\)jb
Cisco IOS=15.2\(2\)jb2
Cisco IOS=15.2\(2\)jb3
Cisco IOS=15.2\(2\)jb4
Cisco IOS=15.2\(2\)jb5
Cisco IOS=15.2\(2\)jb6
Cisco IOS=15.2\(2\)jn1
Cisco IOS=15.2\(2\)jn2
Cisco IOS=15.2\(2\)t
Cisco IOS=15.2\(2\)t1
Cisco IOS=15.2\(2\)t2
Cisco IOS=15.2\(2\)t3
Cisco IOS=15.2\(2\)t4
Cisco IOS=15.2\(3\)ex
Cisco IOS=15.2\(3\)gc
Cisco IOS=15.2\(3\)gc1
Cisco IOS=15.2\(3\)t
Cisco IOS=15.2\(3\)t1
Cisco IOS=15.2\(3\)t2
Cisco IOS=15.2\(3\)t3
Cisco IOS=15.2\(3\)t4
Cisco IOS=15.2\(4\)ec
Cisco IOS=15.2\(4\)gc
Cisco IOS=15.2\(4\)gc1
Cisco IOS=15.2\(4\)gc2
Cisco IOS=15.2\(4\)gc3
Cisco IOS=15.2\(4\)ja
Cisco IOS=15.2\(4\)ja1
Cisco IOS=15.2\(4\)jb
Cisco IOS=15.2\(4\)jb1
Cisco IOS=15.2\(4\)jb2
Cisco IOS=15.2\(4\)jb3
Cisco IOS=15.2\(4\)jb3a
Cisco IOS=15.2\(4\)jb3b
Cisco IOS=15.2\(4\)jb3h
Cisco IOS=15.2\(4\)jb3s
Cisco IOS=15.2\(4\)jb4
Cisco IOS=15.2\(4\)jb5
Cisco IOS=15.2\(4\)jb5h
Cisco IOS=15.2\(4\)jb5m
Cisco IOS=15.2\(4\)jb6
Cisco IOS=15.2\(4\)jb7
Cisco IOS=15.2\(4\)jn
Cisco IOS=15.2\(4\)m
Cisco IOS=15.2\(4\)m1
Cisco IOS=15.2\(4\)m2
Cisco IOS=15.2\(4\)m3
Cisco IOS=15.2\(4\)m4
Cisco IOS=15.2\(4\)m5
Cisco IOS=15.2\(4\)m6
Cisco IOS=15.2\(4\)m6a
Cisco IOS=15.2\(4\)m7
Cisco IOS=15.2\(4\)m8
Cisco IOS=15.2\(4\)m9
Cisco IOS=15.2\(4\)m10
Cisco IOS=15.2\(4\)m11
Cisco IOS=15.2\(5\)e2a
Cisco IOS=15.2\(5\)e2b
Cisco IOS=15.2\(5a\)e1
Cisco IOS=15.3\(1\)t
Cisco IOS=15.3\(1\)t1
Cisco IOS=15.3\(1\)t2
Cisco IOS=15.3\(1\)t3
Cisco IOS=15.3\(1\)t4
Cisco IOS=15.3\(2\)t
Cisco IOS=15.3\(2\)t1
Cisco IOS=15.3\(2\)t2
Cisco IOS=15.3\(2\)t3
Cisco IOS=15.3\(2\)t4
Cisco IOS=15.3\(3\)ja
Cisco IOS=15.3\(3\)ja1
Cisco IOS=15.3\(3\)ja1m
Cisco IOS=15.3\(3\)ja1n
Cisco IOS=15.3\(3\)ja4
Cisco IOS=15.3\(3\)ja5
Cisco IOS=15.3\(3\)ja6
Cisco IOS=15.3\(3\)ja7
Cisco IOS=15.3\(3\)ja8
Cisco IOS=15.3\(3\)ja10
Cisco IOS=15.3\(3\)ja11
Cisco IOS=15.3\(3\)ja76
Cisco IOS=15.3\(3\)ja77
Cisco IOS=15.3\(3\)jaa
Cisco IOS=15.3\(3\)jab
Cisco IOS=15.3\(3\)jax
Cisco IOS=15.3\(3\)jax1
Cisco IOS=15.3\(3\)jax2
Cisco IOS=15.3\(3\)jb
Cisco IOS=15.3\(3\)jb75
Cisco IOS=15.3\(3\)jbb
Cisco IOS=15.3\(3\)jbb1
Cisco IOS=15.3\(3\)jbb2
Cisco IOS=15.3\(3\)jbb4
Cisco IOS=15.3\(3\)jbb5
Cisco IOS=15.3\(3\)jbb6
Cisco IOS=15.3\(3\)jbb6a
Cisco IOS=15.3\(3\)jbb8
Cisco IOS=15.3\(3\)jbb50
Cisco IOS=15.3\(3\)jc
Cisco IOS=15.3\(3\)jc1
Cisco IOS=15.3\(3\)jc2
Cisco IOS=15.3\(3\)jc3
Cisco IOS=15.3\(3\)jc4
Cisco IOS=15.3\(3\)jc5
Cisco IOS=15.3\(3\)jc6
Cisco IOS=15.3\(3\)jc7
Cisco IOS=15.3\(3\)jc50
Cisco IOS=15.3\(3\)jc51
Cisco IOS=15.3\(3\)jca7
Cisco IOS=15.3\(3\)jd
Cisco IOS=15.3\(3\)jd2
Cisco IOS=15.3\(3\)jd3
Cisco IOS=15.3\(3\)jd4
Cisco IOS=15.3\(3\)jda3
Cisco IOS=15.3\(3\)je
Cisco IOS=15.3\(3\)je1
Cisco IOS=15.3\(3\)jn3
Cisco IOS=15.3\(3\)jn4
Cisco IOS=15.3\(3\)jn7
Cisco IOS=15.3\(3\)jn8
Cisco IOS=15.3\(3\)jn9
Cisco IOS=15.3\(3\)jnb
Cisco IOS=15.3\(3\)jnb1
Cisco IOS=15.3\(3\)jnb2
Cisco IOS=15.3\(3\)jnb3
Cisco IOS=15.3\(3\)jnb4
Cisco IOS=15.3\(3\)jnb6
Cisco IOS=15.3\(3\)jnc
Cisco IOS=15.3\(3\)jnc1
Cisco IOS=15.3\(3\)jnc4
Cisco IOS=15.3\(3\)jnd
Cisco IOS=15.3\(3\)jnd1
Cisco IOS=15.3\(3\)jnd2
Cisco IOS=15.3\(3\)jnd3
Cisco IOS=15.3\(3\)jnp
Cisco IOS=15.3\(3\)jnp1
Cisco IOS=15.3\(3\)jnp2
Cisco IOS=15.3\(3\)jpb
Cisco IOS=15.3\(3\)jpb1
Cisco IOS=15.3\(3\)jpb2
Cisco IOS=15.3\(3\)jpc2
Cisco IOS=15.3\(3\)jpc3
Cisco IOS=15.3\(3\)jpd
Cisco IOS=15.3\(3\)m
Cisco IOS=15.3\(3\)m1
Cisco IOS=15.3\(3\)m2
Cisco IOS=15.3\(3\)m3
Cisco IOS=15.3\(3\)m4
Cisco IOS=15.3\(3\)m5
Cisco IOS=15.3\(3\)m6
Cisco IOS=15.3\(3\)m7
Cisco IOS=15.3\(3\)m8
Cisco IOS=15.3\(3\)m8a
Cisco IOS=15.3\(3\)m9
Cisco IOS=15.4\(1\)cg
Cisco IOS=15.4\(1\)cg1
Cisco IOS=15.4\(1\)t
Cisco IOS=15.4\(1\)t1
Cisco IOS=15.4\(1\)t2
Cisco IOS=15.4\(1\)t3
Cisco IOS=15.4\(1\)t4
Cisco IOS=15.4\(2\)cg
Cisco IOS=15.4\(2\)t
Cisco IOS=15.4\(2\)t1
Cisco IOS=15.4\(2\)t2
Cisco IOS=15.4\(2\)t3
Cisco IOS=15.4\(2\)t4
Cisco IOS=15.4\(3\)m
Cisco IOS=15.4\(3\)m1
Cisco IOS=15.4\(3\)m2
Cisco IOS=15.4\(3\)m3
Cisco IOS=15.4\(3\)m4
Cisco IOS=15.4\(3\)m5
Cisco IOS=15.4\(3\)m6
Cisco IOS=15.4\(3\)m6a
Cisco IOS=15.4\(3\)s5a
Cisco IOS=15.4\(3\)s6b
Cisco IOS=15.4\(3\)s7a
Cisco IOS=15.5\(1\)t
Cisco IOS=15.5\(1\)t1
Cisco IOS=15.5\(1\)t2
Cisco IOS=15.5\(1\)t3
Cisco IOS=15.5\(1\)t4
Cisco IOS=15.5\(2\)t
Cisco IOS=15.5\(2\)t1
Cisco IOS=15.5\(2\)t2
Cisco IOS=15.5\(2\)t3
Cisco IOS=15.5\(2\)t4
Cisco IOS=15.5\(3\)m
Cisco IOS=15.5\(3\)m0a
Cisco IOS=15.5\(3\)m1
Cisco IOS=15.5\(3\)m2
Cisco IOS=15.5\(3\)m3
Cisco IOS=15.5\(3\)m4
Cisco IOS=15.5\(3\)m4a
Cisco IOS=15.5\(3\)s2a
Cisco IOS=15.5\(3\)s2b
Cisco IOS=15.5\(3\)s3a
Cisco IOS=15.5\(3\)s4a
Cisco IOS=15.5\(3\)s4b
Cisco IOS=15.5\(3\)s4d
Cisco IOS=15.6\(1\)s1a
Cisco IOS=15.6\(1\)t
Cisco IOS=15.6\(1\)t0a
Cisco IOS=15.6\(1\)t1
Cisco IOS=15.6\(1\)t2
Cisco IOS=15.6\(1\)t3
Cisco IOS=15.6\(2\)s0a
Cisco IOS=15.6\(2\)s2
Cisco IOS=15.6\(2\)s3
Cisco IOS=15.6\(2\)sp1b
Cisco IOS=15.6\(2\)sp1c
Cisco IOS=15.6\(2\)sp2a
Cisco IOS=15.6\(2\)t
Cisco IOS=15.6\(2\)t1
Cisco IOS=15.6\(2\)t2
Cisco IOS=15.6\(3\)m
Cisco IOS=15.6\(3\)m0a
All of the following
Cisco IOS>=15.0<=15.6
Any of the following
Cisco 1000 Integrated Services Router
Cisco 1100-4g\/6g Integrated Services Router
Cisco 1100-4g Integrated Services Router
Cisco 1100-4gltegb Integrated Services Router
Cisco 1100-4gltena Integrated Services Router
Cisco 1100-8p Integrated Services Router
Cisco 1100-lte Integrated Services Router
Cisco 1100 Integrated Services Router
Cisco 1101-4p Integrated Services Router
Cisco 1101 Integrated Services Router
Cisco 1109-2p Integrated Services Router
Cisco 1109-4p Integrated Services Router
Cisco 1109 Integrated Services Router
Cisco 1111x-8p Integrated Services Router
Cisco 1111x Integrated Services Router
Cisco 111x Integrated Services Router
Cisco 1120 Integrated Services Router
Cisco 1131 Integrated Services Router
Cisco 1160 Integrated Services Router
Cisco 1801 Integrated Service Router
Cisco 1802 Integrated Service Router
Cisco 1803 Integrated Service Router
Cisco 1811 Integrated Service Router
Cisco 1812 Integrated Service Router
Cisco 1841 Integrated Service Router
Cisco 1861 Integrated Service Router
Cisco 1905 Integrated Services Router
Cisco 1906c Integrated Services Router
Cisco 1921 Integrated Services Router
Cisco 1941 Integrated Services Router
Cisco 1941w Integrated Services Router
Cisco 4000 Integrated Services Router
Cisco 422 Integrated Services Router
Cisco 4221 Integrated Services Router
Cisco 4321\/k9-rf Integrated Services Router
Cisco 4321\/k9-ws Integrated Services Router
Cisco 4321\/k9 Integrated Services Router
Cisco 4321 Integrated Services Router
Cisco 4331\/k9-rf Integrated Services Router
Cisco 4331\/k9-ws Integrated Services Router
Cisco 4331\/k9 Integrated Services Router
Cisco 4331 Integrated Services Router
Cisco 4351\/k9-rf Integrated Services Router
Cisco 4351\/k9-ws Integrated Services Router
Cisco 4351\/k9 Integrated Services Router
Cisco 4351 Integrated Services Router
Cisco 4431 Integrated Services Router
Cisco 44461 Integrated Services Router
Cisco 4451-x Integrated Services Router
Cisco 4451 Integrated Services Router
Cisco 4461 Integrated Services Router
Cisco 829 Industrial Integrated Services Router
Cisco 829 Industrial Integrated Services Routers
Cisco 829 Integrated Services Router
Cisco 860vae-w Integrated Services Router
Cisco 861 Integrated Services Router
Cisco 861w Integrated Services Router
Cisco 866vae Integrated Services Router
Cisco 867 Integrated Services Router
Cisco 867vae Integrated Services Router
Cisco 871 Integrated Services Router
Cisco 880-voice Integrated Services Router
Cisco 880 3g Integrated Services Router
Cisco 881-cube Integrated Services Router
Cisco 881 3g Integrated Services Router
Cisco 881 Integrated Services Router
Cisco 881w Integrated Services Router
Cisco 886 Integrated Services Router
Cisco 886va-cube Integrated Services Router
Cisco 886va-w Integrated Services Router
Cisco 886va Integrated Services Router
Cisco 886vag 3g Integrated Services Router
Cisco 887 Integrated Services Router
Cisco 887v Integrated Services Router
Cisco 887va-cube Integrated Services Router
Cisco 887va-w Integrated Services Router
Cisco 887va Integrated Services Router
Cisco 887vag 3g Integrated Services Router
Cisco 887vam-w Integrated Services Router
Cisco 887vamg 3g Integrated Services Router
Cisco 888-cube Integrated Services Router
Cisco 888 Integrated Services Router
Cisco 888e-cube Integrated Services Router
Cisco 888e Integrated Services Router
Cisco 888eg 3g Integrated Services Router
Cisco 888w Integrated Services Router
Cisco 891-24x Integrated Services Router
Cisco 891 Integrated Services Router
Cisco 891w Integrated Services Router
Cisco 892 Integrated Services Router
Cisco 892f-cube Integrated Services Router
Cisco 892w Integrated Services Router
Cisco ASR 1000
Cisco Asr 1000-esp100
Cisco Asr 1000-esp100-x
Cisco Asr 1000-esp200-x
Cisco Asr 1000-x
Cisco ASR 1000
Cisco Asr 1001
Cisco Asr 1001-hx
Cisco Asr 1001-hx R
Cisco Asr 1001-x
Cisco Asr 1001-x R
Cisco Asr 1002
Cisco Asr 1002-hx
Cisco Asr 1002-hx R
Cisco Asr 1002-x
Cisco Asr 1002-x R
Cisco Asr 1004
Cisco Asr 1006
Cisco Asr 1006-x
Cisco Asr 1009-x
Cisco Asr 1013
Cisco Asr 1023
Cisco Catalyst 8200
Cisco Catalyst 8300
Cisco Catalyst 8300-1n1s-4t2x
Cisco Catalyst 8300-1n1s-6t
Cisco Catalyst 8300-2n2s-4t2x
Cisco Catalyst 8300-2n2s-6t
Cisco Catalyst 8500
Cisco Catalyst 8500-4qc
Cisco Catalyst 8500l
Cisco Catalyst 8510csr
Cisco Catalyst 8510msr
Cisco Catalyst 8540csr
Cisco Catalyst 8540msr
Cisco Cloud Services Router 1000v
Cisco Integrated Services Virtual Router
Event History
Sep 28, 2017
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
DescriptionWeakness
Sep 29, 2017
Data Sourced
via NVD·01:34 AM
DescriptionSeverityWeaknessAffected Software
Mar 3, 2022
Known Exploited
via CISA·12:00 AM
Frequently Asked Questions
1
What is the severity of CVE-2017-12232?
The severity of CVE-2017-12232 has been rated as Medium due to its potential for denial of service (DoS) attacks on vulnerable Cisco Integrated Services Routers.
2
How do I fix CVE-2017-12232?
To fix CVE-2017-12232, update the affected Cisco IOS software to a version that contains the necessary patches or mitigations.
3
What devices are affected by CVE-2017-12232?
CVE-2017-12232 affects various Cisco Integrated Services Routers running Cisco IOS versions 15.0 through 15.6.
4
What type of attack can CVE-2017-12232 facilitate?
CVE-2017-12232 can facilitate denial-of-service (DoS) attacks that cause the affected device to reload unexpectedly.
5
Is authentication required to exploit CVE-2017-12232?
No, CVE-2017-12232 can be exploited by unauthenticated adjacent attackers.