CVE-2017-12234: Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
Summary: CVE-2017-12234 is a vulnerability in the Common Industrial Protocol (CIP) feature of Cisco IOS software that could let an unauthenticated, remote attacker cause an affected device to reload, resulting in a denial of service. CISA set a remediation due date of 2022-03-24 and lists known ransomware campaign use as unknown.
What's compelling: An unauthenticated remote attacker can force a Cisco IOS device offline with no credentials required, and CISA's catalog records no confirmed ransomware use, so the absence of that signal is not evidence the flaw is being ignored.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2017-12234Cisco
- Related
- CVE-2026-20320: Cisco Broad Works Improper Restriction of XML External Entity Reference Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Known Exploited Vulnerabilities · Oct 29, 2026CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 14, 2026