Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Mar 24, 2022

CVE-2017-12319

High
EPSS 1.3%CISA KEV
Cisco/IOS XE Software

Description

A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition, or potentially corrupt the BGP routing table, which could result in network instability.

EPSS — Exploit Probability

1.3%

Higher than 79.3% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2017-12319

Risk Assessment

ELEVATED
In CISA KEV

Details

Severity
High
EPSS
1.3%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Mar 3, 2022

Added to KEV

Mar 3, 2022

Remediation Due

Mar 24, 2022

Affected Product

Cisco

IOS XE Software

View all Cisco CVEs