CVE Watch—

CVE-2017-12240

Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

13.8%

p97

KEV

SIM

3 de mar. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

13.8%EPSS · 30 dias13.8%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Cisco / IOS and IOS XE Software

Vulnerabilidade

Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

Adicionado ao KEV

3 de mar. de 2022

Corrigir até

24 de mar. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

The Dynamic Host Configuration Protocol (DHCP) relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2017-12240

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2017-6736—

99.4%

KEV—80Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—CVE-2017-6737—

98.8%

KEV—80Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—CVE-2017-6742—

97.6%

KEV—79Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—CVE-2018-0151—

96.6%

KEV—79Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability—CVE-2017-6740—

95.9%

KEV—79Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—CVE-2017-6743—

95.9%

KEV—79Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—