Product:
Cisco IOS
Summary
A vulnerability in the implementation of Network Address Translation functionality in Cisco IOS could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. This vulnerability is due to improper translation of H.323 messages using the Registration, Admission, and Status protocol sent via IPv4 packets. An attacker could exploit this by sending a crafted H.323 RAS packet, potentially causing the device to crash and reload.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2017-12231 |
Exploitation
To exploit this vulnerability, an attacker needs to send a specially crafted H.323 RAS packet to an affected device. This packet is processed by the NAT application layer gateway, which is enabled by default for H.323 RAS messages. If the crafted packet is successfully processed, it can lead to a denial of service condition, causing the device to crash and restart.
Affected Products
- Cisco IOS versions 12.4 to 15.6 configured with NAT ALG for H.323 RAS messages
Mitigation
To mitigate this vulnerability, it is recommended to apply updates as per the vendor’s instructions. Ensuring that NAT ALG is disabled for H.323 RAS messages can also help prevent exploitation.