coldbraid

CVE-2017-12240 Cisco IOS And IOS XE Software

The Dynamic Host Configuration Protocol (DHCP) relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system.

CVSS
not scored

CWE-20

On CISA’s exploited list

Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

Added
2022-03-03
Federal patch deadline
2022-03-24
Ransomware use
not known