CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-09-29
Cisco IOS and IOS XE DHCP Relay Subsystem Remote Code Execution and DoS Vulnerability (CVE-2017-12240) Security Advisory
[Affected Scope] Cisco network devices running Cisco IOS Software versions 12.2 through 15.6 or Cisco IOS XE Software with the DHCP relay subsystem enabled.
[Impact] An unauthenticated, remote attacker can execute arbitrary code with full system privileges (RCE) or trigger a system reload, causing a complete Denial of Service (DoS).
[Mitigation] Apply the official Cisco software updates immediately, or implement access control lists (ACLs) to block unauthorized DHCPv4 traffic and disable DHCP relay where not required.