Description
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to how an affected device processes certain IKEv2 packets. An attacker could exploit this vulnerability by sending specific IKEv2 packets to an affected device to be processed. A successful exploit could allow the attacker to cause high CPU utilization, traceback messages, or a reload of the affected device that leads to a DoS condition. This vulnerability affects Cisco devices that have the Internet Security Association and Key Management Protocol (ISAKMP) enabled. Although only IKEv2 packets can be used to trigger this vulnerability, devices that are running Cisco IOS Software or Cisco IOS XE Software are vulnerable when ISAKMP is enabled. A device does not need to be configured with any IKEv2-specific features to be vulnerable. Many features use IKEv2, including different types of VPNs such as the following: LAN-to-LAN VPN; Remote-access VPN, excluding SSL VPN; Dynamic Multipoint VPN (DMVPN); and FlexVPN. Cisco Bug IDs: CSCvc41277.
Published: 2017-09-28
Score: 7.5 High
EPSS: 5.3% Low
KEV: Yes
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 22 Oct 2025 00:15:00 +0000


Tue, 21 Oct 2025 20:30:00 +0000


Tue, 21 Oct 2025 19:30:00 +0000


Fri, 15 Nov 2024 18:15:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-03-03'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Subscriptions

Cisco 1000 Integrated Services Router 1100-4g\/6g Integrated Services Router 1100-4g Integrated Services Router 1100-4gltegb Integrated Services Router 1100-4gltena Integrated Services Router 1100-4p Integrated Services Router 1100-6g Integrated Services Router 1100-8p Integrated Services Router 1100-lte Integrated Services Router 1100 Integrated Services Router 1101-4p Integrated Services Router 1101 Integrated Services Router 1109-2p Integrated Services Router 1109-4p Integrated Services Router 1109 Integrated Services Router 1111x-8p Integrated Services Router 1111x Integrated Services Router 1120 Integrated Services Router 1131 Integrated Services Router 1160 Integrated Services Router 1240 Connected Grid Router 1801 Integrated Service Router 1802 Integrated Service Router 1803 Integrated Service Router 1811 Integrated Service Router 1812 Integrated Service Router 1841 Integrated Service Router 1861 Integrated Service Router 1905 Integrated Services Router 1906c Integrated Services Router 1921 Integrated Services Router 1941 Integrated Services Router 1941w Integrated Services Router 4000 Integrated Services Router 4221 Integrated Services Router 422 Integrated Services Router 4321\/k9-rf Integrated Services Router 4321\/k9-ws Integrated Services Router 4321\/k9 Integrated Services Router 4321 Integrated Services Router 4331\/k9-rf Integrated Services Router 4331\/k9-ws Integrated Services Router 4331\/k9 Integrated Services Router 4331 Integrated Services Router 4351\/k9-rf Integrated Services Router 4351\/k9-ws Integrated Services Router 4351\/k9 Integrated Services Router 4351 Integrated Services Router 4431 Integrated Services Router 44461 Integrated Services Router 4451-x Integrated Services Router 4451 Integrated Services Router 4461 Integrated Services Router 8101-32fh 8101-32h 8102-64h 8201 8201-32fh 8202 8208 8212 8218 8800 12-slot 8800 18-slot 8800 4-slot 8800 8-slot 8804 8808 8812 8818 8831 9800-40 9800-80 9800-cl 9800-l Asr 1000 Asr 1000-x Asr 1001 Asr 1001-hx Asr 1001-hx R Asr 1001-x Asr 1001-x R Asr 1002 Asr 1002-hx Asr 1002-hx R Asr 1002-x Asr 1002-x R Asr 1004 Asr 1006 Asr 1006-x Asr 1009-x Asr 1013 Asr 1023 Catalyst 3650 Catalyst 3650-12x48fd-e Catalyst 3650-12x48fd-l Catalyst 3650-12x48fd-s Catalyst 3650-12x48uq Catalyst 3650-12x48uq-e Catalyst 3650-12x48uq-l Catalyst 3650-12x48uq-s Catalyst 3650-12x48ur Catalyst 3650-12x48ur-e Catalyst 3650-12x48ur-l Catalyst 3650-12x48ur-s Catalyst 3650-12x48uz Catalyst 3650-12x48uz-e Catalyst 3650-12x48uz-l Catalyst 3650-12x48uz-s Catalyst 3650-24pd Catalyst 3650-24pd-e Catalyst 3650-24pd-l Catalyst 3650-24pd-s Catalyst 3650-24pdm Catalyst 3650-24pdm-e Catalyst 3650-24pdm-l Catalyst 3650-24pdm-s Catalyst 3650-24ps-e Catalyst 3650-24ps-l Catalyst 3650-24ps-s Catalyst 3650-24td-e Catalyst 3650-24td-l Catalyst 3650-24td-s Catalyst 3650-24ts-e Catalyst 3650-24ts-l Catalyst 3650-24ts-s Catalyst 3650-48fd-e Catalyst 3650-48fd-l Catalyst 3650-48fd-s Catalyst 3650-48fq Catalyst 3650-48fq-e Catalyst 3650-48fq-l Catalyst 3650-48fq-s Catalyst 3650-48fqm Catalyst 3650-48fqm-e Catalyst 3650-48fqm-l Catalyst 3650-48fqm-s Catalyst 3650-48fs-e Catalyst 3650-48fs-l Catalyst 3650-48fs-s Catalyst 3650-48pd-e Catalyst 3650-48pd-l Catalyst 3650-48pd-s Catalyst 3650-48pq-e Catalyst 3650-48pq-l Catalyst 3650-48pq-s Catalyst 3650-48ps-e Catalyst 3650-48ps-l Catalyst 3650-48ps-s Catalyst 3650-48td-e Catalyst 3650-48td-l Catalyst 3650-48td-s Catalyst 3650-48tq-e Catalyst 3650-48tq-l Catalyst 3650-48tq-s Catalyst 3650-48ts-e Catalyst 3650-48ts-l Catalyst 3650-48ts-s Catalyst 3650-8x24pd-e Catalyst 3650-8x24pd-l Catalyst 3650-8x24pd-s Catalyst 3650-8x24uq Catalyst 3650-8x24uq-e Catalyst 3650-8x24uq-l Catalyst 3650-8x24uq-s Catalyst 3850 Catalyst 3850-12s-e Catalyst 3850-12s-s Catalyst 3850-12x48u Catalyst 3850-12xs-e Catalyst 3850-12xs-s Catalyst 3850-16xs-e Catalyst 3850-16xs-s Catalyst 3850-24p-e Catalyst 3850-24p-l Catalyst 3850-24p-s Catalyst 3850-24pw-s Catalyst 3850-24s-e Catalyst 3850-24s-s Catalyst 3850-24t-e Catalyst 3850-24t-l Catalyst 3850-24t-s Catalyst 3850-24u Catalyst 3850-24u-e Catalyst 3850-24u-l Catalyst 3850-24u-s Catalyst 3850-24xs Catalyst 3850-24xs-e Catalyst 3850-24xs-s Catalyst 3850-24xu Catalyst 3850-24xu-e Catalyst 3850-24xu-l Catalyst 3850-24xu-s Catalyst 3850-32xs-e Catalyst 3850-32xs-s Catalyst 3850-48f-e Catalyst 3850-48f-l Catalyst 3850-48f-s Catalyst 3850-48p-e Catalyst 3850-48p-l Catalyst 3850-48p-s Catalyst 3850-48pw-s Catalyst 3850-48t-e Catalyst 3850-48t-l Catalyst 3850-48t-s Catalyst 3850-48u Catalyst 3850-48u-e Catalyst 3850-48u-l Catalyst 3850-48u-s Catalyst 3850-48xs Catalyst 3850-48xs-e Catalyst 3850-48xs-f-e Catalyst 3850-48xs-f-s Catalyst 3850-48xs-s Catalyst 3850-nm-2-40g Catalyst 3850-nm-8-10g Catalyst 8200 Catalyst 8300 Catalyst 8300-1n1s-4t2x Catalyst 8300-1n1s-6t Catalyst 8300-2n2s-4t2x Catalyst 8300-2n2s-6t Catalyst 8500 Catalyst 8500-4qc Catalyst 8500l Catalyst 8510csr Catalyst 8510msr Catalyst 8540csr Catalyst 8540msr Catalyst 9200 Catalyst 9200cx Catalyst 9200l Catalyst 9300 Catalyst 9300-24p-a Catalyst 9300-24p-e Catalyst 9300-24s-a Catalyst 9300-24s-e Catalyst 9300-24t-a Catalyst 9300-24t-e Catalyst 9300-24u-a Catalyst 9300-24u-e Catalyst 9300-24ux-a Catalyst 9300-24ux-e Catalyst 9300-48p-a Catalyst 9300-48p-e Catalyst 9300-48s-a Catalyst 9300-48s-e Catalyst 9300-48t-a Catalyst 9300-48t-e Catalyst 9300-48u-a Catalyst 9300-48u-e Catalyst 9300-48un-a Catalyst 9300-48un-e Catalyst 9300-48uxm-a Catalyst 9300-48uxm-e Catalyst 9300l Catalyst 9300l-24p-4g-a Catalyst 9300l-24p-4g-e Catalyst 9300l-24p-4x-a Catalyst 9300l-24p-4x-e Catalyst 9300l-24t-4g-a Catalyst 9300l-24t-4g-e Catalyst 9300l-24t-4x-a Catalyst 9300l-24t-4x-e Catalyst 9300l-48p-4g-a Catalyst 9300l-48p-4g-e Catalyst 9300l-48p-4x-a Catalyst 9300l-48p-4x-e Catalyst 9300l-48t-4g-a Catalyst 9300l-48t-4g-e Catalyst 9300l-48t-4x-a Catalyst 9300l-48t-4x-e Catalyst 9300l Stack Catalyst 9300lm Catalyst 9300x Catalyst 9400 Catalyst 9400 Supervisor Engine-1 Catalyst 9407r Catalyst 9410r Catalyst 9500 Catalyst 9500h Catalyst 9600 Catalyst 9600 Supervisor Engine-1 Catalyst 9600x Catalyst 9800 Catalyst 9800-cl Catalyst 9800-l Catalyst 9800-l-c Catalyst 9800-l-f Catalyst Ie3200 Rugged Switch Catalyst Ie3300 Rugged Switch Catalyst Ie3400 Heavy Duty Switch Catalyst Ie3400 Rugged Switch Catalyst Ie9300 Cbr-8 Converged Broadband Router Esr-6300-con-k9 Esr-6300-ncp-k9 Esr6300 Integrated Services Virtual Router Ios Ios Xe
cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2026-01-12T21:45:24.703Z

Reserved: 2017-08-03T00:00:00.000Z

Link: CVE-2017-12237

cve-icon Vulnrichment

Updated: 2024-08-05T18:28:16.718Z

cve-icon NVD

Status : Deferred

Published: 2017-09-29T01:34:48.967

Modified: 2026-01-12T22:16:00.683

Link: CVE-2017-12237

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses