Cisco IOS software known exploited vulnerabilities, ranked
CISA lists 6 Cisco IOS software CVEs as exploited in the wild. 0 were added in the last 12 months and 0 are known to be used in ransomware. The table ranks all of them by EPSS, FIRST's estimate of the chance a CVE is exploited in the next 30 days, so the first rows are the ones to patch first.
Patch these first
- CVE-2017-6744: EPSS 7.3%, added 2022-03-03
- CVE-2017-12231: EPSS 7.1%, added 2022-03-03
- CVE-2017-12233: EPSS 7.1%, added 2022-03-03
- CVE-2017-12234: EPSS 7.1%, added 2022-03-03
- CVE-2017-12235: EPSS 7.1%, added 2022-03-03
All 6 Cisco IOS software CVEs in CISA KEV, by EPSS
| # | CVE | Flaw | EPSS | Ransomware | Added | Federal due |
|---|---|---|---|---|---|---|
| 1 | CVE-2017-6744 | IOS Software SNMP Remote Code Execution | 7.3% | – | 2022-03-03 | 2022-03-24 |
| 2 | CVE-2017-12231 | IOS Software Network Address Translation Denial-of-Service | 7.1% | – | 2022-03-03 | 2022-03-24 |
| 3 | CVE-2017-12233 | IOS Software Common Industrial Protocol Request Denial-of-Service | 7.1% | – | 2022-03-03 | 2022-03-24 |
| 4 | CVE-2017-12234 | IOS Software Common Industrial Protocol Request Denial-of-Service | 7.1% | – | 2022-03-03 | 2022-03-24 |
| 5 | CVE-2017-12235 | IOS Software for Industrial Ethernet Switches PROFINET Denial-of-Service | 7.1% | – | 2022-03-03 | 2022-03-24 |
| 6 | CVE-2017-12232 | IOS Software for Integrated Services Routers Denial-of-Service | 2.2% | – | 2022-03-03 | 2022-03-24 |
EPSS changes daily; a CVE with a low EPSS that is in KEV is still exploited somewhere. Federal due dates bind US federal civilian agencies; everyone else can use them as a priority hint.
Sources: CISA KEV, FIRST EPSS.
More: all Cisco KEV CVEs · other Cisco products: Catalyst SD-WAN Manager · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) · IOS and IOS XE Software · IOS XR · Small Business RV160, RV260, RV340, and RV345 Series Routers · free KEV badge for Cisco · all vendors