CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-09-29
Cisco IOS and IOS XE IKEv2 Protocol Processing Remote Denial of Service Vulnerability (CVE-2017-12237)
[Affected Scope] Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 with ISAKMP enabled
[Impact] Unauthenticated, remote attackers can trigger high CPU utilization, traceback messages, or device reloads (DoS) by sending crafted IKEv2 packets
[Mitigation] Apply official Cisco software patches immediately, or restrict UDP 500/4500 traffic at the network boundary using Infrastructure ACLs (iACLs).