Product:
Cisco IOS
Summary
The DHCP relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system. The vulnerability is due to a buffer overflow condition in the DHCP relay subsystem. An attacker could exploit this vulnerability by sending a crafted DHCP Version 4 packet to an affected system, potentially causing a denial of service condition.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2017-12240 |
Exploitation
To exploit this vulnerability, an attacker needs to send a specially crafted DHCPv4 packet to the affected system. If successful, this could allow the attacker to execute arbitrary code, gaining full control of the system or causing it to reload, leading to a denial of service condition.
Affected Products
- Cisco IOS 12.2 through 15.6
- Cisco IOS XE Software
Mitigation
Apply updates as per vendor instructions to mitigate the vulnerability. It is crucial to ensure that all affected systems are updated to the latest versions to prevent exploitation.