Live › vulnerability › CVE-2017-12234
Go to dashboardCisco IOS software has a flaw in its Common Industrial Protocol (CIP) handling that lets an unauthenticated remote attacker reload the device. The result is a denial of service, and the flaw is listed as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Cisco IOS software | vendor | – | – |
Run show running-config | include cip on the device to see whether CIP is enabled; unknown for the exact affected versions.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc43709.
This page as .md · .json · in your agent: get_signal("CVE-2017-12234")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.