CVE-2017-12233VulnerabilityPublished 03/03/2022Updated 10/24/2026
CVE-2017-12233: Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
Affects Cisco IOS softwareSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 03/03/2022
- KEV deadline
- 03/24/2022
- EPSS
- 7.1% chance of exploitation in 30 days – higher than 94% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2017-12233 is a vulnerability in Cisco IOS software's Common Industrial Protocol (CIP) feature that allows an unauthenticated remote attacker to cause the device to reload, resulting in a denial of service. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.