CVE-2017-12232

Summary

CVE	CVE-2017-12232
State	PUBLISHED
Assigner	cisco
Source Priority	CVE Program / NVD first with legacy fallback
Published	2017-09-29 01:34:48 UTC
Updated	2026-04-22 15:51:13 UTC
Description	A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a misclassification of Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc03809.

Risk And Classification

Primary CVSS: v3.1 6.5 MEDIUM from [email protected]

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.009870000 probability, percentile 0.768800000 (date 2026-04-21)

CISA KEV: Listed on 2022-03-03; due 2022-03-24; ransomware use Unknown

Problem Types: CWE-399 | NVD-CWE-noinfo | CWE-399 CWE-399

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Primary	6.5	MEDIUM	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
3.1	ADP	DECLARED	6.5	MEDIUM	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
3.1	134c704f-9b21-4f2e-91b3-4a467353bcc0	Secondary	6.5	MEDIUM	`CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
2.0	[email protected]	Primary	6.1		`AV:A/AC:L/Au:N/C:N/I:N/A:C`

CVSS v3.1 Breakdown

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0 Breakdown

Access Vector

Adjacent

Access Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

AV:A/AC:L/Au:N/C:N/I:N/A:C

CISA Known Exploited Vulnerability

Vendor	Cisco
Product	IOS software
Name	Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability
Required Action	Apply updates per vendor instructions.
Notes	https://nvd.nist.gov/vuln/detail/CVE-2017-12232

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Cisco	1000 Integrated Services Router	-	All	All	All
Hardware	Cisco	1100-4gltegb Integrated Services Router	-	All	All	All
Hardware	Cisco	1100-4gltena Integrated Services Router	-	All	All	All
Hardware	Cisco	1100-4g/6g Integrated Services Router	-	All	All	All
Hardware	Cisco	1100-4g Integrated Services Router	-	All	All	All
Hardware	Cisco	1100-8p Integrated Services Router	-	All	All	All
Hardware	Cisco	1100-lte Integrated Services Router	-	All	All	All
Hardware	Cisco	1100 Integrated Services Router	-	All	All	All
Hardware	Cisco	1101-4p Integrated Services Router	-	All	All	All
Hardware	Cisco	1101 Integrated Services Router	-	All	All	All
Hardware	Cisco	1109-2p Integrated Services Router	-	All	All	All
Hardware	Cisco	1109-4p Integrated Services Router	-	All	All	All
Hardware	Cisco	1109 Integrated Services Router	-	All	All	All
Hardware	Cisco	1111x-8p Integrated Services Router	-	All	All	All
Hardware	Cisco	1111x Integrated Services Router	-	All	All	All
Hardware	Cisco	111x Integrated Services Router	-	All	All	All
Hardware	Cisco	1120 Integrated Services Router	-	All	All	All
Hardware	Cisco	1131 Integrated Services Router	-	All	All	All
Hardware	Cisco	1160 Integrated Services Router	-	All	All	All
Hardware	Cisco	1801 Integrated Service Router	-	All	All	All
Hardware	Cisco	1802 Integrated Service Router	-	All	All	All
Hardware	Cisco	1803 Integrated Service Router	-	All	All	All
Hardware	Cisco	1811 Integrated Service Router	-	All	All	All
Hardware	Cisco	1812 Integrated Service Router	-	All	All	All
Hardware	Cisco	1841 Integrated Service Router	-	All	All	All
Hardware	Cisco	1861 Integrated Service Router	-	All	All	All
Hardware	Cisco	1905 Integrated Services Router	-	All	All	All
Hardware	Cisco	1906c Integrated Services Router	-	All	All	All
Hardware	Cisco	1921 Integrated Services Router	-	All	All	All
Hardware	Cisco	1941w Integrated Services Router	-	All	All	All
Hardware	Cisco	1941 Integrated Services Router	-	All	All	All
Hardware	Cisco	4000 Integrated Services Router	-	All	All	All
Hardware	Cisco	4221 Integrated Services Router	-	All	All	All
Hardware	Cisco	422 Integrated Services Router	-	All	All	All
Hardware	Cisco	4321/k9-rf Integrated Services Router	-	All	All	All
Hardware	Cisco	4321/k9-ws Integrated Services Router	-	All	All	All
Hardware	Cisco	4321/k9 Integrated Services Router	-	All	All	All
Hardware	Cisco	4321 Integrated Services Router	-	All	All	All
Hardware	Cisco	4331/k9-rf Integrated Services Router	-	All	All	All
Hardware	Cisco	4331/k9-ws Integrated Services Router	-	All	All	All
Hardware	Cisco	4331/k9 Integrated Services Router	-	All	All	All
Hardware	Cisco	4331 Integrated Services Router	-	All	All	All
Hardware	Cisco	4351/k9-rf Integrated Services Router	-	All	All	All
Hardware	Cisco	4351/k9-ws Integrated Services Router	-	All	All	All
Hardware	Cisco	4351/k9 Integrated Services Router	-	All	All	All
Hardware	Cisco	4351 Integrated Services Router	-	All	All	All
Hardware	Cisco	4431 Integrated Services Router	-	All	All	All
Hardware	Cisco	44461 Integrated Services Router	-	All	All	All
Hardware	Cisco	4451-x Integrated Services Router	-	All	All	All
Hardware	Cisco	4451 Integrated Services Router	-	All	All	All
Hardware	Cisco	4461 Integrated Services Router	-	All	All	All
Hardware	Cisco	829 Industrial Integrated Services Router	-	All	All	All
Hardware	Cisco	829 Industrial Integrated Services Routers	-	All	All	All
Hardware	Cisco	829 Integrated Services Router	-	All	All	All
Hardware	Cisco	860vae-w Integrated Services Router	-	All	All	All
Hardware	Cisco	861w Integrated Services Router	-	All	All	All
Hardware	Cisco	861 Integrated Services Router	-	All	All	All
Hardware	Cisco	866vae Integrated Services Router	-	All	All	All
Hardware	Cisco	867vae Integrated Services Router	-	All	All	All
Hardware	Cisco	867 Integrated Services Router	-	All	All	All
Hardware	Cisco	871 Integrated Services Router	-	All	All	All
Hardware	Cisco	880-voice Integrated Services Router	-	All	All	All
Hardware	Cisco	880 3g Integrated Services Router	-	All	All	All
Hardware	Cisco	881-cube Integrated Services Router	-	All	All	All
Hardware	Cisco	881w Integrated Services Router	-	All	All	All
Hardware	Cisco	881 3g Integrated Services Router	-	All	All	All
Hardware	Cisco	881 Integrated Services Router	-	All	All	All
Hardware	Cisco	886va-cube Integrated Services Router	-	All	All	All
Hardware	Cisco	886va-w Integrated Services Router	-	All	All	All
Hardware	Cisco	886vag 3g Integrated Services Router	-	All	All	All
Hardware	Cisco	886va Integrated Services Router	-	All	All	All
Hardware	Cisco	886 Integrated Services Router	-	All	All	All
Hardware	Cisco	887va-cube Integrated Services Router	-	All	All	All
Hardware	Cisco	887va-w Integrated Services Router	-	All	All	All
Hardware	Cisco	887vag 3g Integrated Services Router	-	All	All	All
Hardware	Cisco	887vam-w Integrated Services Router	-	All	All	All
Hardware	Cisco	887vamg 3g Integrated Services Router	-	All	All	All
Hardware	Cisco	887va Integrated Services Router	-	All	All	All
Hardware	Cisco	887v Integrated Services Router	-	All	All	All
Hardware	Cisco	887 Integrated Services Router	-	All	All	All
Hardware	Cisco	888-cube Integrated Services Router	-	All	All	All
Hardware	Cisco	888e-cube Integrated Services Router	-	All	All	All
Hardware	Cisco	888eg 3g Integrated Services Router	-	All	All	All
Hardware	Cisco	888e Integrated Services Router	-	All	All	All
Hardware	Cisco	888w Integrated Services Router	-	All	All	All
Hardware	Cisco	888 Integrated Services Router	-	All	All	All
Hardware	Cisco	891-24x Integrated Services Router	-	All	All	All
Hardware	Cisco	891w Integrated Services Router	-	All	All	All
Hardware	Cisco	891 Integrated Services Router	-	All	All	All
Hardware	Cisco	892f-cube Integrated Services Router	-	All	All	All
Hardware	Cisco	892w Integrated Services Router	-	All	All	All
Hardware	Cisco	892 Integrated Services Router	-	All	All	All
Hardware	Cisco	Asr 1000	-	All	All	All
Hardware	Cisco	Asr 1000-esp100	-	All	All	All
Hardware	Cisco	Asr 1000-esp100-x	-	All	All	All
Hardware	Cisco	Asr 1000-esp200-x	-	All	All	All
Hardware	Cisco	Asr 1000-x	-	All	All	All
Hardware	Cisco	Asr 1000	-	All	All	All
Hardware	Cisco	Asr 1001	-	All	All	All
Hardware	Cisco	Asr 1001-hx	-	All	All	All
Hardware	Cisco	Asr 1001-hx R	-	All	All	All
Hardware	Cisco	Asr 1001-x	-	All	All	All
Hardware	Cisco	Asr 1001-x R	-	All	All	All
Hardware	Cisco	Asr 1002	-	All	All	All
Hardware	Cisco	Asr 1002-hx	-	All	All	All
Hardware	Cisco	Asr 1002-hx R	-	All	All	All
Hardware	Cisco	Asr 1002-x	-	All	All	All
Hardware	Cisco	Asr 1002-x R	-	All	All	All
Hardware	Cisco	Asr 1004	-	All	All	All
Hardware	Cisco	Asr 1006	-	All	All	All
Hardware	Cisco	Asr 1006-x	-	All	All	All
Hardware	Cisco	Asr 1009-x	-	All	All	All
Hardware	Cisco	Asr 1013	-	All	All	All
Hardware	Cisco	Asr 1023	-	All	All	All
Hardware	Cisco	Catalyst 8200	-	All	All	All
Hardware	Cisco	Catalyst 8300	-	All	All	All
Hardware	Cisco	Catalyst 8300-1n1s-4t2x	-	All	All	All
Hardware	Cisco	Catalyst 8300-1n1s-6t	-	All	All	All
Hardware	Cisco	Catalyst 8300-2n2s-4t2x	-	All	All	All
Hardware	Cisco	Catalyst 8300-2n2s-6t	-	All	All	All
Hardware	Cisco	Catalyst 8500	-	All	All	All
Hardware	Cisco	Catalyst 8500-4qc	-	All	All	All
Hardware	Cisco	Catalyst 8500l	-	All	All	All
Hardware	Cisco	Catalyst 8510csr	-	All	All	All
Hardware	Cisco	Catalyst 8510msr	-	All	All	All
Hardware	Cisco	Catalyst 8540csr	-	All	All	All
Hardware	Cisco	Catalyst 8540msr	-	All	All	All
Hardware	Cisco	Cloud Services Router 1000v	-	All	All	All
Hardware	Cisco	Integrated Services Virtual Router	-	All	All	All
Operating System	Cisco	Ios	All	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	Cisco IOS	affected Cisco IOS	Not specified

References

Reference	Source	Link	Tags
Cisco IOS Software for Cisco Integrated Services Routers Generation 2 Denial of Service Vulnerability	af854a3a-2127-422b-91ae-364da2661108	tools.cisco.com	Vendor Advisory
Malformed Request	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Broken Link, Third Party Advisory, VDB Entry
www.cisa.gov/known-exploited-vulnerabilities-catalog	134c704f-9b21-4f2e-91b3-4a467353bcc0	www.cisa.gov	US Government Resource
Cisco Industrial Integrated Services Routers G2 Ethernet Classification Error Lets Remote Users Cause the Target System to Reload - SecurityTracker	af854a3a-2127-422b-91ae-364da2661108	www.securitytracker.com	Broken Link, Third Party Advisory, VDB Entry
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis
CISA Known Exploited Vulnerabilities catalog	CISA	www.cisa.gov	kev

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.