Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-12237

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to how an affected device processes certain IKEv2 packets. An attacker could exploit this vulnerability by sending specific IKEv2 packets to an affected device to be processed. A successful exploit could allow the attacker to cause high CPU utilization, traceback messages, or a reload of the affected device that leads to a DoS condition. This vulnerability affects Cisco devices that have the Internet Security Association and Key Management Protocol (ISAKMP) enabled. Although only IKEv2 packets can be used to trigger this vulnerability, devices that are running Cisco IOS Software or Cisco IOS XE Software are vulnerable when ISAKMP is enabled. A device does not need to be configured with any IKEv2-specific features to be vulnerable. Many features use IKEv2, including different types of VPNs such as the following: LAN-to-LAN VPN; Remote-access VPN, excluding SSL VPN; Dynamic Multipoint VPN (DMVPN); and FlexVPN. Cisco Bug IDs: CSCvc41277.

Published

2017-09-29T01:34:48.967

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-399
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios ≤ 15.6 Yes
Operating System cisco ios_xe ≤ 16.5 Yes
Hardware cisco 1000_integrated_services_router - No
Hardware cisco 1100-4g\/6g_integrated_services_router - No
Hardware cisco 1100-4g_integrated_services_router - No
Hardware cisco 1100-4gltegb_integrated_services_router - No
Hardware cisco 1100-4gltena_integrated_services_router - No
Hardware cisco 1100-4p_integrated_services_router - No
Hardware cisco 1100-6g_integrated_services_router - No
Hardware cisco 1100-8p_integrated_services_router - No
Hardware cisco 1100-lte_integrated_services_router - No
Hardware cisco 1100_integrated_services_router - No
Hardware cisco 1101-4p_integrated_services_router - No
Hardware cisco 1101_integrated_services_router - No
Hardware cisco 1109-2p_integrated_services_router - No
Hardware cisco 1109-4p_integrated_services_router - No
Hardware cisco 1109_integrated_services_router - No
Hardware cisco 1111x-8p_integrated_services_router - No
Hardware cisco 1111x_integrated_services_router - No
Hardware cisco 1120_integrated_services_router - No
Hardware cisco 1131_integrated_services_router - No
Hardware cisco 1160_integrated_services_router - No
Hardware cisco 1240_connected_grid_router - No
Hardware cisco 1801_integrated_service_router - No
Hardware cisco 1802_integrated_service_router - No
Hardware cisco 1803_integrated_service_router - No
Hardware cisco 1811_integrated_service_router - No
Hardware cisco 1812_integrated_service_router - No
Hardware cisco 1841_integrated_service_router - No
Hardware cisco 1861_integrated_service_router - No
Hardware cisco 1905_integrated_services_router - No
Hardware cisco 1906c_integrated_services_router - No
Hardware cisco 1921_integrated_services_router - No
Hardware cisco 1941_integrated_services_router - No
Hardware cisco 1941w_integrated_services_router - No
Hardware cisco 4000_integrated_services_router - No
Hardware cisco 422_integrated_services_router - No
Hardware cisco 4221_integrated_services_router - No
Hardware cisco 4321\/k9-rf_integrated_services_router - No
Hardware cisco 4321\/k9-ws_integrated_services_router - No
Hardware cisco 4321\/k9_integrated_services_router - No
Hardware cisco 4321_integrated_services_router - No
Hardware cisco 4331\/k9-rf_integrated_services_router - No
Hardware cisco 4331\/k9-ws_integrated_services_router - No
Hardware cisco 4331\/k9_integrated_services_router - No
Hardware cisco 4331_integrated_services_router - No
Hardware cisco 4351\/k9-rf_integrated_services_router - No
Hardware cisco 4351\/k9-ws_integrated_services_router - No
Hardware cisco 4351\/k9_integrated_services_router - No
Hardware cisco 4351_integrated_services_router - No
Hardware cisco 4431_integrated_services_router - No
Hardware cisco 44461_integrated_services_router - No
Hardware cisco 4451-x_integrated_services_router - No
Hardware cisco 4451_integrated_services_router - No
Hardware cisco 4461_integrated_services_router - No
Hardware cisco 8101-32fh - No
Hardware cisco 8101-32h - No
Hardware cisco 8102-64h - No
Hardware cisco 8201 - No
Hardware cisco 8201-32fh - No
Hardware cisco 8202 - No
Hardware cisco 8208 - No
Hardware cisco 8212 - No
Hardware cisco 8218 - No
Hardware cisco 8800_12-slot - No
Hardware cisco 8800_18-slot - No
Hardware cisco 8800_4-slot - No
Hardware cisco 8800_8-slot - No
Hardware cisco 8804 - No
Hardware cisco 8808 - No
Hardware cisco 8812 - No
Hardware cisco 8818 - No
Hardware cisco 8831 - No
Hardware cisco 9800-40 - No
Hardware cisco 9800-80 - No
Hardware cisco 9800-cl - No
Hardware cisco 9800-l - No
Hardware cisco asr_1000 - No
Hardware cisco asr_1000-x - No
Hardware cisco asr_1001 - No
Hardware cisco asr_1001-hx - No
Hardware cisco asr_1001-hx_r - No
Hardware cisco asr_1001-x - No
Hardware cisco asr_1001-x_r - No
Hardware cisco asr_1002 - No
Hardware cisco asr_1002-hx - No
Hardware cisco asr_1002-hx_r - No
Hardware cisco asr_1002-x - No
Hardware cisco asr_1002-x_r - No
Hardware cisco asr_1004 - No
Hardware cisco asr_1006 - No
Hardware cisco asr_1006-x - No
Hardware cisco asr_1009-x - No
Hardware cisco asr_1013 - No
Hardware cisco asr_1023 - No
Hardware cisco catalyst_3650 - No
Hardware cisco catalyst_3650-12x48fd-e - No
Hardware cisco catalyst_3650-12x48fd-l - No
Hardware cisco catalyst_3650-12x48fd-s - No
Hardware cisco catalyst_3650-12x48uq - No
Hardware cisco catalyst_3650-12x48uq-e - No
Hardware cisco catalyst_3650-12x48uq-l - No
Hardware cisco catalyst_3650-12x48uq-s - No
Hardware cisco catalyst_3650-12x48ur - No
Hardware cisco catalyst_3650-12x48ur-e - No
Hardware cisco catalyst_3650-12x48ur-l - No
Hardware cisco catalyst_3650-12x48ur-s - No
Hardware cisco catalyst_3650-12x48uz - No
Hardware cisco catalyst_3650-12x48uz-e - No
Hardware cisco catalyst_3650-12x48uz-l - No
Hardware cisco catalyst_3650-12x48uz-s - No
Hardware cisco catalyst_3650-24pd - No
Hardware cisco catalyst_3650-24pd-e - No
Hardware cisco catalyst_3650-24pd-l - No
Hardware cisco catalyst_3650-24pd-s - No
Hardware cisco catalyst_3650-24pdm - No
Hardware cisco catalyst_3650-24pdm-e - No
Hardware cisco catalyst_3650-24pdm-l - No
Hardware cisco catalyst_3650-24pdm-s - No
Hardware cisco catalyst_3650-24ps-e - No
Hardware cisco catalyst_3650-24ps-l - No
Hardware cisco catalyst_3650-24ps-s - No
Hardware cisco catalyst_3650-24td-e - No
Hardware cisco catalyst_3650-24td-l - No
Hardware cisco catalyst_3650-24td-s - No
Hardware cisco catalyst_3650-24ts-e - No
Hardware cisco catalyst_3650-24ts-l - No
Hardware cisco catalyst_3650-24ts-s - No
Hardware cisco catalyst_3650-48fd-e - No
Hardware cisco catalyst_3650-48fd-l - No
Hardware cisco catalyst_3650-48fd-s - No
Hardware cisco catalyst_3650-48fq - No
Hardware cisco catalyst_3650-48fq-e - No
Hardware cisco catalyst_3650-48fq-l - No
Hardware cisco catalyst_3650-48fq-s - No
Hardware cisco catalyst_3650-48fqm - No
Hardware cisco catalyst_3650-48fqm-e - No
Hardware cisco catalyst_3650-48fqm-l - No
Hardware cisco catalyst_3650-48fqm-s - No
Hardware cisco catalyst_3650-48fs-e - No
Hardware cisco catalyst_3650-48fs-l - No
Hardware cisco catalyst_3650-48fs-s - No
Hardware cisco catalyst_3650-48pd-e - No
Hardware cisco catalyst_3650-48pd-l - No
Hardware cisco catalyst_3650-48pd-s - No
Hardware cisco catalyst_3650-48pq-e - No
Hardware cisco catalyst_3650-48pq-l - No
Hardware cisco catalyst_3650-48pq-s - No
Hardware cisco catalyst_3650-48ps-e - No
Hardware cisco catalyst_3650-48ps-l - No
Hardware cisco catalyst_3650-48ps-s - No
Hardware cisco catalyst_3650-48td-e - No
Hardware cisco catalyst_3650-48td-l - No
Hardware cisco catalyst_3650-48td-s - No
Hardware cisco catalyst_3650-48tq-e - No
Hardware cisco catalyst_3650-48tq-l - No
Hardware cisco catalyst_3650-48tq-s - No
Hardware cisco catalyst_3650-48ts-e - No
Hardware cisco catalyst_3650-48ts-l - No
Hardware cisco catalyst_3650-48ts-s - No
Hardware cisco catalyst_3650-8x24pd-e - No
Hardware cisco catalyst_3650-8x24pd-l - No
Hardware cisco catalyst_3650-8x24pd-s - No
Hardware cisco catalyst_3650-8x24uq - No
Hardware cisco catalyst_3650-8x24uq-e - No
Hardware cisco catalyst_3650-8x24uq-l - No
Hardware cisco catalyst_3650-8x24uq-s - No
Hardware cisco catalyst_3850 - No
Hardware cisco catalyst_3850-12s-e - No
Hardware cisco catalyst_3850-12s-s - No
Hardware cisco catalyst_3850-12x48u - No
Hardware cisco catalyst_3850-12xs-e - No
Hardware cisco catalyst_3850-12xs-s - No
Hardware cisco catalyst_3850-16xs-e - No
Hardware cisco catalyst_3850-16xs-s - No
Hardware cisco catalyst_3850-24p-e - No
Hardware cisco catalyst_3850-24p-l - No
Hardware cisco catalyst_3850-24p-s - No
Hardware cisco catalyst_3850-24pw-s - No
Hardware cisco catalyst_3850-24s-e - No
Hardware cisco catalyst_3850-24s-s - No
Hardware cisco catalyst_3850-24t-e - No
Hardware cisco catalyst_3850-24t-l - No
Hardware cisco catalyst_3850-24t-s - No
Hardware cisco catalyst_3850-24u - No
Hardware cisco catalyst_3850-24u-e - No
Hardware cisco catalyst_3850-24u-l - No
Hardware cisco catalyst_3850-24u-s - No
Hardware cisco catalyst_3850-24xs - No
Hardware cisco catalyst_3850-24xs-e - No
Hardware cisco catalyst_3850-24xs-s - No
Hardware cisco catalyst_3850-24xu - No
Hardware cisco catalyst_3850-24xu-e - No
Hardware cisco catalyst_3850-24xu-l - No
Hardware cisco catalyst_3850-24xu-s - No
Hardware cisco catalyst_3850-32xs-e - No
Hardware cisco catalyst_3850-32xs-s - No
Hardware cisco catalyst_3850-48f-e - No
Hardware cisco catalyst_3850-48f-l - No
Hardware cisco catalyst_3850-48f-s - No
Hardware cisco catalyst_3850-48p-e - No
Hardware cisco catalyst_3850-48p-l - No
Hardware cisco catalyst_3850-48p-s - No
Hardware cisco catalyst_3850-48pw-s - No
Hardware cisco catalyst_3850-48t-e - No
Hardware cisco catalyst_3850-48t-l - No
Hardware cisco catalyst_3850-48t-s - No
Hardware cisco catalyst_3850-48u - No
Hardware cisco catalyst_3850-48u-e - No
Hardware cisco catalyst_3850-48u-l - No
Hardware cisco catalyst_3850-48u-s - No
Hardware cisco catalyst_3850-48xs - No
Hardware cisco catalyst_3850-48xs-e - No
Hardware cisco catalyst_3850-48xs-f-e - No
Hardware cisco catalyst_3850-48xs-f-s - No
Hardware cisco catalyst_3850-48xs-s - No
Hardware cisco catalyst_3850-nm-2-40g - No
Hardware cisco catalyst_3850-nm-8-10g - No
Hardware cisco catalyst_8200 - No
Hardware cisco catalyst_8300 - No
Hardware cisco catalyst_8300-1n1s-4t2x - No
Hardware cisco catalyst_8300-1n1s-6t - No
Hardware cisco catalyst_8300-2n2s-4t2x - No
Hardware cisco catalyst_8300-2n2s-6t - No
Hardware cisco catalyst_8500 - No
Hardware cisco catalyst_8500-4qc - No
Hardware cisco catalyst_8500l - No
Hardware cisco catalyst_8510csr - No
Hardware cisco catalyst_8510msr - No
Hardware cisco catalyst_8540csr - No
Hardware cisco catalyst_8540msr - No
Hardware cisco catalyst_9200 - No
Hardware cisco catalyst_9200cx - No
Hardware cisco catalyst_9200l - No
Hardware cisco catalyst_9300 - No
Hardware cisco catalyst_9300-24p-a - No
Hardware cisco catalyst_9300-24p-e - No
Hardware cisco catalyst_9300-24s-a - No
Hardware cisco catalyst_9300-24s-e - No
Hardware cisco catalyst_9300-24t-a - No
Hardware cisco catalyst_9300-24t-e - No
Hardware cisco catalyst_9300-24u-a - No
Hardware cisco catalyst_9300-24u-e - No
Hardware cisco catalyst_9300-24ux-a - No
Hardware cisco catalyst_9300-24ux-e - No
Hardware cisco catalyst_9300-48p-a - No
Hardware cisco catalyst_9300-48p-e - No
Hardware cisco catalyst_9300-48s-a - No
Hardware cisco catalyst_9300-48s-e - No
Hardware cisco catalyst_9300-48t-a - No
Hardware cisco catalyst_9300-48t-e - No
Hardware cisco catalyst_9300-48u-a - No
Hardware cisco catalyst_9300-48u-e - No
Hardware cisco catalyst_9300-48un-a - No
Hardware cisco catalyst_9300-48un-e - No
Hardware cisco catalyst_9300-48uxm-a - No
Hardware cisco catalyst_9300-48uxm-e - No
Hardware cisco catalyst_9300l - No
Hardware cisco catalyst_9300l-24p-4g-a - No
Hardware cisco catalyst_9300l-24p-4g-e - No
Hardware cisco catalyst_9300l-24p-4x-a - No
Hardware cisco catalyst_9300l-24p-4x-e - No
Hardware cisco catalyst_9300l-24t-4g-a - No
Hardware cisco catalyst_9300l-24t-4g-e - No
Hardware cisco catalyst_9300l-24t-4x-a - No
Hardware cisco catalyst_9300l-24t-4x-e - No
Hardware cisco catalyst_9300l-48p-4g-a - No
Hardware cisco catalyst_9300l-48p-4g-e - No
Hardware cisco catalyst_9300l-48p-4x-a - No
Hardware cisco catalyst_9300l-48p-4x-e - No
Hardware cisco catalyst_9300l-48t-4g-a - No
Hardware cisco catalyst_9300l-48t-4g-e - No
Hardware cisco catalyst_9300l-48t-4x-a - No
Hardware cisco catalyst_9300l-48t-4x-e - No
Hardware cisco catalyst_9300l_stack - No
Hardware cisco catalyst_9300lm - No
Hardware cisco catalyst_9300x - No
Hardware cisco catalyst_9400 - No
Hardware cisco catalyst_9400_supervisor_engine-1 - No
Hardware cisco catalyst_9407r - No
Hardware cisco catalyst_9410r - No
Hardware cisco catalyst_9500 - No
Hardware cisco catalyst_9500h - No
Hardware cisco catalyst_9600 - No
Hardware cisco catalyst_9600_supervisor_engine-1 - No
Hardware cisco catalyst_9600x - No
Hardware cisco catalyst_9800 - No
Hardware cisco catalyst_9800-cl - No
Hardware cisco catalyst_9800-l - No
Hardware cisco catalyst_9800-l-c - No
Hardware cisco catalyst_9800-l-f - No
Hardware cisco catalyst_ie3200_rugged_switch - No
Hardware cisco catalyst_ie3300_rugged_switch - No
Hardware cisco catalyst_ie3400_heavy_duty_switch - No
Hardware cisco catalyst_ie3400_rugged_switch - No
Hardware cisco catalyst_ie9300 - No
Hardware cisco cbr-8_converged_broadband_router - No
Hardware cisco esr-6300-con-k9 - No
Hardware cisco esr-6300-ncp-k9 - No
Hardware cisco esr6300 - No
Hardware cisco integrated_services_virtual_router - No
References