SWSandworm Watch
target entity

IOS software

6 source-linked records in the current knowledge graph.

high

CVE-2017-6744: Cisco IOS Software SNMP Remote Code Execution Vulnerability

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 1 contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Required action: Apply updates per vendor instructions.

CVE-2017-6744EPSS 7.2%CiscoIOS software
CISA KEV ↗ · unattributed attribution
high

CVE-2017-12235: Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability

A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service. Required action: Apply updates per vendor instructions.

CVE-2017-12235EPSS 7.1%CiscoIOS software
CISA KEV ↗ · unattributed attribution
high

CVE-2017-12232: Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability

A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service. Required action: Apply updates per vendor instructions.

CVE-2017-12232EPSS 2.2%CiscoIOS software
CISA KEV ↗ · unattributed attribution