CVE-2017-12240

KEV

Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

Vendor / Project: Cisco
Product: IOS and IOS XE Software
Date added: Mar 3, 2022
Due date: Mar 24, 2022
Known ransomware use: Unknown
CWEs: CWE-20

Description

The Dynamic Host Configuration Protocol (DHCP) relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-12240