CVE-2017-12240

Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability — Cisco / IOS and IOS XE Software

Risk tier: Monitored

Description

The Dynamic Host Configuration Protocol (DHCP) relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system.

NVD enrichment (full description, CVSS vector, CWEs) has not completed for this CVE yet — shown above is the CISA KEV short description only.

Scoring

  • CVSS: Not yet available
  • EPSS exploitation probability: Not yet available
  • EPSS percentile: Not yet available

CISA KEV status

  • Added to KEV: 2022-03-03
  • Remediation due date: 2022-03-24
  • Known ransomware campaign use: Unknown

All exploited vulnerabilities