CISA Known Exploited Vulnerability

CVE-2017-12234

Cisco · IOS software

Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

Date added
BOD 22-01 due date
CWE CWE-20
Ransomware Unknown

CISA description

There is a vulnerability in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.

Required action

Apply updates per vendor instructions.