CVE-2017-12234VulnerabilityPublished 03/03/2022Updated 10/24/2026
CVE-2017-12234: Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
Affects Cisco IOS softwareSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 03/03/2022
- KEV deadline
- 03/24/2022
- EPSS
- 7.1% chance of exploitation in 30 days – higher than 94% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2017-12234 is a vulnerability in Cisco IOS software's implementation of the Common Industrial Protocol (CIP) feature. An unauthenticated remote attacker can exploit this flaw to cause the affected device to reload, resulting in a denial of service condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.