CVE-2017-12235: Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
Summary: CVE-2017-12235 is a vulnerability in Cisco IOS's implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) that lets an unauthenticated, remote attacker cause an affected device to reload, resulting in a denial of service. It affects Cisco IOS software, and CISA set a remediation due date of 2022-03-24; known ransomware campaign use is listed as unknown.
Key Takeaway: An unauthenticated remote attacker can force a reload of Cisco industrial Ethernet switches running IOS, and CISA's remediation deadline for this flaw passed on 2022-03-24.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2017-12235Cisco
- Related
- CVE-2026-20320: Cisco Broad Works Improper Restriction of XML External Entity Reference Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Known Exploited Vulnerabilities · Oct 29, 2026CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 14, 2026