CVE Watch—

CVE-2017-12235

Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability

CVSS

—

No CVSS

EPSS

7.1%

p94

KEV

YES

Mar 3, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

6.9%EPSS · 30 days7.1%

2026-06-302026-07-16

KEV catalog record

Product

Cisco / IOS software

Vulnerability

Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability

Added to KEV

Mar 3, 2022

Remediate by

Mar 24, 2022

Known ransomware use

Summary description

A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-12235

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2017-6744—

93.6%

KEV—78Cisco IOS Software SNMP Remote Code Execution Vulnerability—CVE-2017-12234—

93.5%

KEV—78Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability—CVE-2017-12233—

93.5%

KEV—78Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability—CVE-2017-12231—

93.5%

KEV—78Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability—CVE-2017-12232—

80.2%

KEV—74Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability—