Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-12235

A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to the improper parsing of ingress PN-DCP Identify Request packets destined to an affected device. An attacker could exploit this vulnerability by sending a crafted PN-DCP Identify Request packet to an affected device and then continuing to send normal PN-DCP Identify Request packets to the device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. This vulnerability affects Cisco devices that are configured to process PROFINET messages. Beginning with Cisco IOS Software Release 12.2(52)SE, PROFINET is enabled by default on all the base switch module and expansion-unit Ethernet ports. Cisco Bug IDs: CSCuz47179.

Published

2017-09-29T01:34:48.890

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios ≤ 15.6 Yes
Hardware cisco industrial_ethernet_2000_16ptc-g-e_switch - No
Hardware cisco industrial_ethernet_2000_16ptc-g-l_switch - No
Hardware cisco industrial_ethernet_2000_16ptc-g-nx_switch - No
Hardware cisco industrial_ethernet_2000_16t67-b_switch - No
Hardware cisco industrial_ethernet_2000_16t67p-g-e_switch - No
Hardware cisco industrial_ethernet_2000_16tc-g-e_switch - No
Hardware cisco industrial_ethernet_2000_16tc-g-l_switch - No
Hardware cisco industrial_ethernet_2000_16tc-g-n_switch - No
Hardware cisco industrial_ethernet_2000_16tc-g-x_switch - No
Hardware cisco industrial_ethernet_2000_16tc-l_switch - No
Hardware cisco industrial_ethernet_2000_24t67-b_switch - No
Hardware cisco industrial_ethernet_2000_4s-ts-g-b_switch - No
Hardware cisco industrial_ethernet_2000_4s-ts-g-l_switch - No
Hardware cisco industrial_ethernet_2000_4t-b_switch - No
Hardware cisco industrial_ethernet_2000_4t-g-b_switch - No
Hardware cisco industrial_ethernet_2000_4t-g-l_switch - No
Hardware cisco industrial_ethernet_2000_4t-l_switch - No
Hardware cisco industrial_ethernet_2000_4ts-b_switch - No
Hardware cisco industrial_ethernet_2000_4ts-g-b_switch - No
Hardware cisco industrial_ethernet_2000_4ts-g-l_switch - No
Hardware cisco industrial_ethernet_2000_4ts-l_switch - No
Hardware cisco industrial_ethernet_2000_8t67-b_switch - No
Hardware cisco industrial_ethernet_2000_8t67p-g-e_switch - No
Hardware cisco industrial_ethernet_2000_8tc-b_switch - No
Hardware cisco industrial_ethernet_2000_8tc-g-b_switch - No
Hardware cisco industrial_ethernet_2000_8tc-g-e_switch - No
Hardware cisco industrial_ethernet_2000_8tc-g-l_switch - No
Hardware cisco industrial_ethernet_2000_8tc-g-n_switch - No
Hardware cisco industrial_ethernet_2000_8tc-l_switch - No
Hardware cisco industrial_ethernet_2000_series_firmware 15.2\(5.4.32i\)e2 No
References