PT-2017-12453 · Cisco · Cisco Ios

Published 2017-11-02 · Updated 2019-10-09 · CVE-2017-12279

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco Aironet Access Points (affected versions not specified)

Description A vulnerability in the packet processing code could allow an unauthenticated, adjacent attacker to retrieve content from memory on an affected device, leading to the disclosure of confidential information. This issue is due to insufficient condition checks when adding padding to egress packets. An attacker could exploit this by sending a crafted IP packet to an affected device, potentially allowing them to retrieve content from memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-12279

Affected Products

Cisco Ios

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-12279 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-iosap · Vendor Advisory
• http://securityfocus.com/bid/101643 · Note
• http://securitytracker.com/id/1039720 · Note