{"id":"CVE-2017-12232","kind":"vulnerability","aliases":["CVE-2017-12232"],"related":[],"title":"Cisco IOS software: Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability","description":"A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a misclassification of Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc03809.","summary":"A protocol implementation flaw in Cisco IOS on Integrated Services Routers Generation 2 lets an unauthenticated attacker on the adjacent network cause the device to reload. The result is a denial of service, and CISA lists it as known exploited.","severity":"high","cvss":6.5,"epss":0.02153,"exploited":true,"exploited_at":"2022-03-03T00:00:00+00:00","products":[{"name":"Cisco IOS software","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["cisco","exploited","infrastructure","ios","isr-g2","network-appliance"],"not_affected_if":["no-affected-protocol-enabled","not-isr-g2"],"how_to_check":null,"fix":"Apply the updates per Cisco's vendor instructions; the specific fixed IOS version is not stated in the sources.","status":"open","published_at":"2017-09-29T01:34:48+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:24:24+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:24:24Z","model":"claude-haiku-5-5","output":{"fix":"Apply the updates per Cisco's vendor instructions; the specific fixed IOS version is not stated in the sources.","reach":"network","impact":"low","summary":"A protocol implementation flaw in Cisco IOS on Integrated Services Routers Generation 2 lets an unauthenticated attacker on the adjacent network cause the device to reload. The result is a denial of service, and CISA lists it as known exploited.","category":"infrastructure","who_cares":["cisco","ios","isr-g2","network-appliance"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker forces a router reload, causing denial of service on the network.","analyst_note":"Find the affected protocol, fixed IOS versions and detection commands in the Cisco advisory for CVE-2017-12232 (search cisco.com security advisories).","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["not-isr-g2","no-affected-protocol-enabled"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000478,"input_tokens":2886,"output_tokens":378,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-12232':19A,22A '-2017':18A,21A '15.0':97C '15.6':99C '2':48B,90C 'adjac':55B,104C 'affect':109C,145C,157C 'allow':101C,151C 'applianc':35B 'attack':52B,105C,132C,153C 'bug':167C 'caus':57B,107C,155C 'cisa':70B 'cisco':1A,4A,8A,23A,26B,41B,85C,95C,166C 'condit':120C,165C 'could':100C,133C,150C 'craft':140C 'cscvc03809':169C 'cve':17A,20A 'denial':13A,66B,116C 'denial-of-servic':12A 'devic':59B,110C,146C,158C 'dos':119C,164C 'due':124C 'ethernet':129C,141C 'exploit':27B,75B,134C,149C 'flaw':39B 'frame':130C,142C 'g2':32B,92C 'generat':47B,89C 'id':168C 'implement':38B,80C 'infrastructur':28B 'integr':9A,44B,86C 'io':2A,5A,29B,42B,96C 'ios':24A 'isr':31B,91C 'isr-g2':30B 'known':74B 'let':49B 'list':71B 'misclassif':127C 'network':34B,56B 'network-appli':33B 'protocol':37B,83C 'reload':61B,112C,160C 'result':63B,113C,161C 'router':11A,46B,88C,93C 'run':94C 'send':138C 'servic':10A,15A,45B,68B,87C,118C 'softwar':3A,6A 'software':25A 'success':148C 'unauthent':51B,103C 'vulner':16A,77C,122C,136C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2017-09-29T01:34:48+00:00","kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2017-12232","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-12232","severity":null,"published_at":"2022-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T16:39:49+00:00","note":null},{"source":"epss","external_id":"CVE-2017-12232","url":"https://api.first.org/data/v1/epss?cve=CVE-2017-12232","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2017-12232","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12232","severity":null,"published_at":"2017-09-29T01:34:48+00:00","modified_at":"2026-06-17T01:02:55+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}