cvelistv5 - cve-2017-12234

cve-2017-12234

Vulnerability from cvelistv5

Published

2017-09-28 07:00

Modified

2024-11-15 17:57

Severity ?

Summary

Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc43709.

References

URL	Tags
ykramarz@cisco.com	http://www.securityfocus.com/bid/101038	Broken Link, Third Party Advisory, VDB Entry
ykramarz@cisco.com	http://www.securitytracker.com/id/1039459	Broken Link, Third Party Advisory, VDB Entry
ykramarz@cisco.com	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-cip	Vendor Advisory

Impacted products

▼	Vendor	Product
	n/a	Cisco IOS

CISA Known exploited vulnerability

Data from the Known Exploited Vulnerabilities Catalog

Date added: 2022-03-03

Due date: 2022-03-24

Required action: Apply updates per vendor instructions.

Used in ransomware: Unknown

Notes: https://nvd.nist.gov/vuln/detail/CVE-2017-12234

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.717Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-cip"
          },
          {
            "name": "101038",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101038"
          },
          {
            "name": "1039459",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039459"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-12234",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-08T17:33:33.008147Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2022-03-03",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12234"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-15T17:57:27.695Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco IOS",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Cisco IOS"
            }
          ]
        }
      ],
      "datePublic": "2017-09-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc43709."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-29T09:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-cip"
        },
        {
          "name": "101038",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101038"
        },
        {
          "name": "1039459",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039459"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2017-12234",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco IOS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Cisco IOS"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc43709."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-cip",
              "refsource": "CONFIRM",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-cip"
            },
            {
              "name": "101038",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101038"
            },
            {
              "name": "1039459",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039459"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2017-12234",
    "datePublished": "2017-09-28T07:00:00",
    "dateReserved": "2017-08-03T00:00:00",
    "dateUpdated": "2024-11-15T17:57:27.695Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2017-12234",
      "cwes": "[\"CWE-20\"]",
      "dateAdded": "2022-03-03",
      "dueDate": "2022-03-24",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://nvd.nist.gov/vuln/detail/CVE-2017-12234",
      "product": "IOS software",
      "requiredAction": "Apply updates per vendor instructions.",
      "shortDescription": "There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.",
      "vendorProject": "Cisco",
      "vulnerabilityName": "Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2017-12234\",\"sourceIdentifier\":\"ykramarz@cisco.com\",\"published\":\"2017-09-29T01:34:48.857\",\"lastModified\":\"2024-07-16T17:28:12.417\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"cisaExploitAdd\":\"2022-03-03\",\"cisaActionDue\":\"2022-03-24\",\"cisaRequiredAction\":\"Apply updates per vendor instructions.\",\"cisaVulnerabilityName\":\"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc43709.\"},{\"lang\":\"es\",\"value\":\"M\u00faltiples vulnerabilidades en la implementaci\u00f3n de una caracter\u00edstica CIP (Common Industrial Protocol) en Cisco IOS desde la versi\u00f3n 12.4 hasta la 15.6 podr\u00edan permitir que un atacante remoto sin autenticar haga que el dispositivo afectado se reinicie, provocando una denegaci\u00f3n de servicio (DoS) en consecuencia. Estas vulnerabilidades se deben a un an\u00e1lisis sint\u00e1ctico incorrecto de los paquetes CIP manipulados destinados al dispositivo afectado. Un atacante podr\u00eda explotar estas vulnerabilidades enviando paquetes CIP manipulados para que los procese el dispositivo afectado. Si se explota con \u00e9xito, podr\u00eda permitir que el atacante consiga que el dispositivo afectado se reinicie, provocando una denegaci\u00f3n de servicio. Cisco Bug IDs: CSCvc43709.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:C\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\",\"baseScore\":7.8},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]},{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.4\",\"versionEndIncluding\":\"15.6\",\"matchCriteriaId\":\"3AE09220-EF68-4DFE-AA9C-E4F5508EDF3D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4856E07-B3C2-4674-9584-866F6AF643B2\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1100-4g\\\\/6g_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6F668B9-2C1D-4306-8286-35E67D0F67C7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F77CD6A-83DA-4F31-A128-AD6DAECD623B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62564BB8-1282-4597-A645-056298BE7CCB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80E9CC47-3D7C-437A-85BE-4BB94C8AF1B8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1100-4p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA8D5057-138A-42C4-BA35-8077A0A60068\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2D2305B-B69E-4F74-A44E-07B3205CE9F7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B68B363-3C57-4E95-8B13-0F9B59D551F7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1100-8p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED555B12-41F4-4D62-B519-22601FB7AF8D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1100-lte_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EBE4E146-1D77-4F15-AE58-3C1CE5DB62C5\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1952B64C-4AE0-4CCB-86C5-8D1FF6A12822\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1100_terminal_services_gateways:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9A4ED65-7DED-4EAD-BF37-FCA71E807CA1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1101-4p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21B10158-5235-483E-BACD-C407609EA6BE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5AAD4397-6DCF-493A-BD61-3A890F6F3AB2\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5EB8A757-7888-4AC2-BE44-B89DB83C6C77\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1109-2p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8964F9BA-6E6C-44BF-9A8C-93D081B6678C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1109-4p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51251FE1-67D2-4903-B7D3-E0C727B9A93C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1111-4pwe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7262ADAB-296F-4DC2-9CD7-A86D7F6441C8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1111-8pwb:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E3056B31-1977-4472-BC74-19A5B8B5EC44\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1111x-8p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"784E4562-FE26-4049-9D23-4CA46432EE14\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1113-8plteeawe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9261A638-E2E4-4EF0-84E9-A585BF763263\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1113-8pmwe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C85463D-0B37-4746-B7EA-80F3096305E7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1113-8pwe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"58C04E5B-AC03-440F-9007-0D6761B41F68\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1116-4plteeawe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"29A5E963-2987-4927-862A-6375624FC876\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1116-4pwe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3601499F-AD3B-47EA-816A-A01379CA1A33\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1117-4plteeawe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"303129EF-9107-4B39-8683-1BD917B3E68D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1117-4pmlteeawe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"76B2B271-555B-4439-95D8-086E516F1169\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1117-4pmwe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6CB321CD-9096-4F75-AD2F-4EAE1CA75D76\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1117-4pwe:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"98F31C77-0303-4FD9-B968-6B430202C6AD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1120:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2D64BDE-0D00-4FBE-873B-F5D52AD0C5A2\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1120_connected_grid_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6835F8AD-B55D-4B57-B3B5-0095E309B2B3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3F374DC-B9F7-4515-A064-01BB436CA984\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D916389F-54DB-44CB-91DD-7CE3C7059350\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1801_integrated_service_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D5E48D7-2266-4649-90A9-62C476AFE6DE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1802_integrated_service_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99581637-E184-4A02-8313-57C7C31E5479\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1803_integrated_service_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C6D4A90-31B9-4B6C-ADAC-44C49DB44115\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1811_integrated_service_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3AF3F75-0BD8-4AA6-B696-3624BEE86681\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1812_integrated_service_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C58CEA6-69F8-4021-98C9-4676C70AB167\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1841_integrated_service_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF156D97-7C39-49CF-9938-D9681066FF05\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1861_integrated_service_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"459FEB4E-54E3-4FE5-82A5-6E4ECE855DD6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1905_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"871AC0F6-5C01-43A1-8436-7885439BD81F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1906c_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1DEFFA8-11A6-43CC-A886-DD38EFF22ACB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1921_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2147DBF8-B733-4F76-90C5-9D94F1E93625\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1941_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F42D5B4-BB07-4C9C-852F-0D839E9F2AA7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:1941w_integrated_services_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9222CA59-F4FD-478D-83C9-566B389140B8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_ie3200_rugged_switch:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"86879AC0-890E-42F4-9561-6851F38FE0AD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_ie3300_rugged_switch:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19017B10-F630-42CD-ACD2-E817FEF0E7F1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_ie3400_heavy_duty_switch:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04A41A34-58D2-4DBC-ABC9-20A62BC8A838\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_ie3400_rugged_switch:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C7CCC02-113E-4EA1-B0CA-9FDF1108BB71\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_ie9300:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8DF0025D-8DE1-437D-9A4E-72C3AC6B46CD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:esr-6300-con-k9:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5E69A6F-DFC0-4C8A-B77F-B7329FA5F567\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:esr-6300-ncp-k9:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2BA015C4-7163-4FCD-ADE1-D5481B10EACA\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/101038\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039459\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-cip\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

cve-2017-12234

Vulnerability from cvelistv5

CISA Known exploited vulnerability

Data from the Known Exploited Vulnerabilities Catalog

gsd-2017-12234

Vulnerability from gsd

cisco-sa-20170927-cip

Vulnerability from csaf_cisco

ghsa-89f3-gxqw-p6pq

Vulnerability from github

var-201709-0706

Vulnerability from variot

Tags

Sightings

Nomenclature