PT-2017-2990 · Cisco · Cisco Ios

Published 2017-09-27 · Updated 2025-01-27 · CVE-2017-12235

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS Software versions 12.2 through 15.6

Description A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) exists due to improper parsing of ingress PN-DCP Identify Request packets. This could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The attacker could exploit this vulnerability by sending a crafted PN-DCP Identify Request packet to an affected device and then continuing to send normal PN-DCP Identify Request packets to the device.

Recommendations For Cisco IOS Software versions 12.2 through 15.6, update to a fixed software version to address this vulnerability. As a temporary workaround, consider restricting access to the PROFINET protocol to minimize the risk of exploitation. Avoid using the PN-DCP Identify Request packet in the affected API endpoint until the issue is resolved.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2017-02335

CVE-2017-12235

Affected Products

Cisco Ios

References · 9

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-profinet · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02335 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12235 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12235 · Security Note
• http://securityfocus.com/bid/101043 · Note
• http://securitytracker.com/id/1039451 · Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12235 · Note
• https://t.me/cvenotify/108717 · Telegram Post
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note