Product:
Cisco IOS
Summary
Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. These vulnerabilities arise from improper parsing of crafted CIP packets. A successful exploit could lead to a complete denial of service for the affected device.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2017-12233 |
Exploitation
An attacker can exploit these vulnerabilities by sending specially crafted CIP packets to an affected device. The device’s improper handling of these packets can trigger a reload, leading to a denial of service. Since no authentication is required, the attack can be executed remotely, making it easier for attackers to target vulnerable devices.
Affected Products
- Cisco IOS 12.4 – 15.6: Vulnerable versions of Cisco IOS that implement the Common Industrial Protocol feature.
Mitigation
To mitigate the risks associated with these vulnerabilities, it is essential to apply updates as per the vendor’s instructions. Keeping the software up to date will help protect against potential exploits.