Vulnerabilitycritical

CISCO addressed several critical IOS flaws that expose devices to remote attacks

Security Affairsby @securityaffairsOct 1, 2017 · 13:20 UTC (Oct 1, 2017)3 min read2

Read at securityaffairs.com

Analyze CVE-2017-12229 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2017-12229 CVE-2017-12230 CVE-2017-12240

Tags: cve-2017-12229 cve-2017-12230 cve-2017-12240 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-12229 +1 related CVE CVE-2017-12230	A vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1 through 16.5 could allow an unauthenticated, remote attacker to…	9.8 group max	5%		Sep 29, 2017
CVE-2017-12240	Unauthenticated RCE via DHCP Relay in Cisco IOS and IOS XE Software	9.8	14%	KEV	Sep 29, 2017 KEV Mar 3, 2022

From the original article

3 min read at securityaffairs.com

Cisco has released security updates for its IOS Operating System to fix more than a dozen critical and high severity vulnerabilities. Cisco has released updates for its IOS software to fix more than a dozen critical and high severity vulnerabilities that could be exploited by attackers to remotely take over company’s switches and routers.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.