Live › vulnerability › CVE-2017-12240
Go to dashboardCisco IOS and IOS XE DHCP relay subsystem contains a flaw that lets an unauthenticated remote attacker execute arbitrary code on the device. A successful attacker gains full control of the affected router or switch.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Cisco IOS and IOS XE Software | vendor | – | – |
Run show version on the device to identify the IOS or IOS XE release, then compare it against the fixed releases in the Cisco advisory.
Upgrade IOS or IOS XE to a fixed release per the Cisco security advisory; the CISA entry says only to apply vendor updates.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a buffer overflow condition in the DHCP relay subsystem of the affected software. An attacker could exploit this vulnerability by sending a crafted DHCP Version 4 (DHCPv4) packet to an affected system. A successful exploit could allow the attacker to execute arbitrary code and gain full control of the affected system or cause the affected system to reload, resulting in a DoS condition. Cisco Bug IDs: CSCsm45390, CSCuw77959.
This page as .md · .json · in your agent: get_signal("CVE-2017-12240")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.