CVE-2017-12232

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

A vulnerability in the protocol implementation on Cisco Integrated Services Routers Generation 2 (ISR G2) running IOS versions 15.0 through 15.6 permits an unauthenticated adjacent attacker to trigger a device reload. The root cause is misclassification of Ethernet frames, tracked under Cisco Bug ID CSCvc03809 and assigned CWE-399. The flaw affects only the listed router platforms and IOS releases; successful exploitation produces a denial-of-service condition without requiring authentication or user interaction.

An attacker positioned on the same Layer-2 network can send a single crafted Ethernet frame to an affected interface. Because the device incorrectly classifies the frame, it enters an error-handling path that forces a reload. The CVSS vector (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) reflects the requirement for adjacency and the high impact on availability.

The Cisco Security Advisory cisco-sa-20170927-rbip-dos, along with the associated SecurityFocus and SecurityTracker entries, directs administrators to the fixed software releases and any available workarounds for the listed IOS versions. No reports of in-the-wild exploitation appear in the provided references.