CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–2 of 2 advisories (Page 1/1)

CVE-2017-122347.5/HIGHEPSS 7.1%CISA KEV

2017-09-29

Cisco IOS Common Industrial Protocol (CIP) Input Validation Vulnerability Leading to Remote Denial of Service (CVE-2017-12234)

[Affected Scope] Cisco IOS Software versions 12.4 through 15.6 with the Common Industrial Protocol (CIP) feature enabled

[Impact] An unauthenticated, remote attacker can cause the affected device to reload, resulting in a complete Denial of Service (DoS) condition

[Mitigation] Apply the official Cisco IOS software updates or restrict access to the CIP port (TCP/UDP 44818) using Access Control Lists (ACLs)

CVE-2017-122337.5/HIGHEPSS 7.1%CISA KEV

2017-09-29

[Affected Scope] Cisco IOS Software versions 12.4 through 15.6 with the Common Industrial Protocol (CIP) feature enabled.

[Impact] An unauthenticated, remote attacker can cause the affected device to reload, resulting in a complete Denial of Service (DoS) condition.

[Mitigation] Apply official Cisco software updates or implement Infrastructure Access Control Lists (iACLs) to restrict unauthorized CIP traffic.