CVEvulnerability
CVE-2017-12211
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-09-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 6.3 MEDIUM — AV:N/AC:M/Au:S/C:N/I:N/A:C
- Weaknesses
- CWE-399
Description
A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause high CPU usage or a reload of the device. The vulnerability is due to IPv6 sub block corruption. An attacker could exploit this vulnerability by polling the affected device IPv6 information. An exploit could allow the attacker to trigger high CPU usage or a reload of the device. Known Affected Releases: Denali-16.3.1. Cisco Bug IDs: CSCvb14640.
Affected configurations
• cisco ios 3.16.1
• cisco ios xe 3.16.1
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/100648 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039290 Third Party Advisory, VDB Entry
- https://quickview.cloudapps.cisco.com/quickview/bug/CSCvb14640 Vendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-snmp Vendor Advisory
- http://www.securityfocus.com/bid/100648 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039290 Third Party Advisory, VDB Entry
- https://quickview.cloudapps.cisco.com/quickview/bug/CSCvb14640 Vendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-snmp Vendor Advisory