CVE-2017-12240 Cisco IOS and IOS XE Software DHCP Remote Code Execution
Remote attackers can execute arbitrary code or cause denial of service via crafted DHCPv4 packets in Cisco IOS DHCP relay.
- Exploited in the wild
- Since 3 Mar 2022
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-12240?
CVE-2017-12240 is a critical memory corruption vulnerability in Cisco Ios, published on 28 Sep 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a buffer overflow condition in the DHCP relay subsystem of the affected software. An attacker could exploit this vulnerability by sending a crafted DHCP Version 4 (DHCPv4) packet to an affected system. A successful exploit could allow the attacker to execute arbitrary code and gain full control of the affected system or cause the affected system to reload, resulting in a DoS condition. Cisco Bug IDs: CSCsm45390, CSCuw77959.
Which versions are affected by CVE-2017-12240?
It affects 1 product.
Products include Cisco Ios.
How do I fix CVE-2017-12240?
No fix has been published for CVE-2017-12240 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 24 Mar 2022.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2017-12240 being exploited?
Yes. Attackers have exploited CVE-2017-12240 in the wild since at least 3 Mar 2022.
Other vulnerabilities in Cisco Ios
- CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution
- CVE-2018-0167 Cisco IOS, XR, and XE Software Buffer Overflow
- CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution
- CVE-2017-6737 Cisco IOS and IOS XE Software SNMP Remote Code Execution
- CVE-2017-6738 Cisco IOS and IOS XE Software SNMP Remote Code Execution
Sources
Also known as GHSA-q8rh-r33q-hvj2.