Skip to main content
CVE-2017-12233VulnerabilityPublished 03/03/2022Updated 10/24/2026

CVE-2017-12233: Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

Affects Cisco IOS softwareSource CISA KEV

Severity
High

No CVSS score published yet

Exploitation

Actively exploited – in CISA KEV since 03/03/2022

KEV deadline
03/24/2022
EPSS
7.1% chance of exploitation in 30 days – higher than 94% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

Description

CVE-2017-12233 is a vulnerability in Cisco IOS software's Common Industrial Protocol (CIP) feature that allows an unauthenticated remote attacker to cause the device to reload, resulting in a denial of service. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Weaknesses

References

Track Cisco IOS software with alerts and the API. See plans

Added 10/24/2026 · analysed 10/24/2026 · updated 10/24/2026