CVE-2017-12319VulnerabilityPublished 03/03/2022Updated 10/24/2026

CVE-2017-12319: Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability

Affects Cisco IOS XE SoftwareSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/03/2022
KEV deadline: 03/24/2022
EPSS: 5.2% chance of exploitation in 30 days – higher than 92% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2017-12319 (opens in a new tab)

Description

CVE-2017-12319 is a vulnerability in Cisco IOS XE Software's Border Gateway Protocol (BGP) over Ethernet Virtual Private Network (EVPN) that allows an unauthenticated remote attacker to cause a device reload, leading to denial of service, or potentially corrupt the BGP routing table, causing network instability.

Summary

This vulnerability affects Cisco IOS XE Software's implementation of BGP over EVPN. An unauthenticated remote attacker can exploit this flaw to trigger a device reload, resulting in a denial of service condition. Additionally, exploitation may corrupt the BGP routing table, which could destabilize network routing. The vulnerability is identified as CWE-20, indicating improper input validation or handling. It has been observed to be exploited in the wild.

Impact

Successful exploitation can cause the affected Cisco IOS XE device to reload unexpectedly, leading to temporary network outages (denial of service). Furthermore, corruption of the BGP routing table may cause broader network instability, potentially affecting routing decisions and network availability.

Mitigation

No explicit patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. Given the known exploitation in the wild, affected organizations should monitor Cisco advisories closely and apply any official fixes promptly once available.

Weaknesses

CWE-20Improper Input Validation (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:27:28 UTC

Weaknesses

References

Related threats