Product:
Cisco Integrated Services Routers Generation 2
Summary
A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service condition. The vulnerability is due to a misclassification of Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to an affected device.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2017-12232 |
Exploitation
To exploit this vulnerability, an attacker on the adjacent network can send a specially crafted Ethernet frame to the affected Cisco Integrated Services Router. If the frame is processed by the device, it may trigger a reload of the router, leading to a denial of service condition. This requires no authentication, making it easier for an attacker to execute.
Affected Products
- Cisco Integrated Services Routers Generation 2 running Cisco IOS 15.0 through 15.6
Mitigation
To mitigate this vulnerability, users should apply updates as per the vendor’s instructions. Ensuring that devices are running the latest software versions can help protect against this and other vulnerabilities.