CVE-2017-12235VulnerabilityPublished 03/03/2022Updated 10/24/2026
CVE-2017-12235: Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
Affects Cisco IOS softwareSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 03/03/2022
- KEV deadline
- 03/24/2022
- EPSS
- 7.1% chance of exploitation in 30 days – higher than 94% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2017-12235 is a vulnerability in Cisco IOS software for Cisco Industrial Ethernet Switches affecting the PROFINET Discovery and Configuration Protocol (PN-DCP). An unauthenticated remote attacker can exploit this flaw to cause the device to reload, resulting in a denial of service. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the input data.