Product:
Cisco IOS
Summary
A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to improper parsing of PN-DCP Identify Request packets. An attacker could exploit this by sending crafted packets to the device, leading to a DoS condition.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2017-12235 |
Exploitation
To exploit this vulnerability, an attacker must send a specially crafted PN-DCP Identify Request packet to an affected device. Following this, the attacker can continue to send normal PN-DCP Identify Request packets. If successful, this could cause the device to reload, resulting in a denial of service.
Affected Products
- Cisco IOS 12.2 through 15.6: Vulnerable to DoS due to improper parsing of PN-DCP packets.
- Devices configured to process PROFINET messages: Affected by the vulnerability when processing PN-DCP Identify Request packets.
Mitigation
To mitigate this vulnerability, apply updates as per the vendor’s instructions. Ensure that devices are configured correctly to handle PROFINET messages and monitor for any unusual activity.