CVE-2017-12211

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-09-07 · updated 2026-06-17
Weakness: CWE-399

Description

A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause high CPU usage or a reload of the device. The vulnerability is due to IPv6 sub block corruption. An attacker could exploit this vulnerability by polling the affected device IPv6 information. An exploit could allow the attacker to trigger high CPU usage or a reload of the device. Known Affected Releases: Denali-16.3.1. Cisco Bug IDs: CSCvb14640.

Affected products

Cisco IOS: 3.16.1
Cisco IOS XE: 3.16.1

References

http://www.securityfocus.com/bid/100648
http://www.securitytracker.com/id/1039290
https://quickview.cloudapps.cisco.com/quickview/bug/CSCvb14640
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-snmp
http://www.securityfocus.com/bid/100648
http://www.securitytracker.com/id/1039290
https://quickview.cloudapps.cisco.com/quickview/bug/CSCvb14640
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-snmp

Get alerted when CVE-2017-12211 or the next vulnerability affects your stack