Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2017-12240

Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

Description

The Dynamic Host Configuration Protocol (DHCP) relay subsystem of Cisco IOS and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 24 Mar 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.