CVE-2017-12236
First published: Fri Sep 29 2017(Updated: )
A vulnerability in the implementation of the Locator/ID Separation Protocol (LISP) in Cisco IOS XE 3.2 through 16.5 could allow an unauthenticated, remote attacker using an x tunnel router to bypass authentication checks performed when registering an Endpoint Identifier (EID) to a Routing Locator (RLOC) in the map server/map resolver (MS/MR). The vulnerability is due to a logic error introduced via a code regression for the affected software. An attacker could exploit this vulnerability by sending specific valid map-registration requests, which will be accepted by the MS/MR even if the authentication keys do not match, to the affected software. A successful exploit could allow the attacker to inject invalid mappings of EIDs to RLOCs in the MS/MR of the affected software. This vulnerability affects Cisco devices that are configured with LISP acting as an IPv4 or IPv6 map server. This vulnerability affects Cisco IOS XE Software release trains 3.9E and Everest 16.4. Cisco Bug IDs: CSCvc18008.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE Web UI | =3.2.0ja | |
| Cisco IOS XE Web UI | =3.9.1e | |
| Cisco IOS XE Web UI | =16.5.1c |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-12236?
CVE-2017-12236 has a critical severity rating due to its potential for unauthenticated remote exploitation.
How do I fix CVE-2017-12236?
The fix for CVE-2017-12236 involves upgrading to a patched version of Cisco IOS XE that is not vulnerable.
What products are affected by CVE-2017-12236?
CVE-2017-12236 affects specific versions of Cisco IOS XE, including versions 3.2.0ja, 3.9.1e, and 16.5.1c.
What type of attack is possible with CVE-2017-12236?
CVE-2017-12236 can allow an attacker to bypass authentication checks when registering an Endpoint Identifier to a Routing Locator.
Is authentication required to exploit CVE-2017-12236?
No, CVE-2017-12236 can be exploited by unauthenticated remote attackers.
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe web ui
- version/cisco ios xe web ui/3.2.0ja
- version/cisco ios xe web ui/3.9.1e
- version/cisco ios xe web ui/16.5.1c