CVE-2017-3812
Estado: ModificadaMedia (6.8)—
A vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to a system memory leak. More Information: CSCvc54788. Known Affected Releases: 15.2(5.4.32i)E2. Known Fixed Releases: 15.2(5.4.62i)E2.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
- Puntuación base: 6.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.81%
- Percentil entre todas las CVEs puntuadas: 86
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-772
Referencias
- http://www.securityfocus.com/bid/95946
- http://www.securitytracker.com/id/1037771
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-psc1
- http://www.securityfocus.com/bid/95946
- http://www.securitytracker.com/id/1037771
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-psc1
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-3812",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.1,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 6.8,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 4,
"exploitabilityScore": 2.2
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "Cisco Industrial Ethernet 2000 Switches 15.2(5.4.32i)E2",
"versions": [
{
"status": "affected",
"version": "Cisco Industrial Ethernet 2000 Switches 15.2(5.4.32i)E2"
}
]
}
]
}
],
"published": "2017-02-03T07:59:00.763",
"references": [
{
"url": "http://www.securityfocus.com/bid/95946",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securitytracker.com/id/1037771",
"source": "psirt@cisco.com"
},
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-psc1",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securityfocus.com/bid/95946",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1037771",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-psc1",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-772"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to a system memory leak. More Information: CSCvc54788. Known Affected Releases: 15.2(5.4.32i)E2. Known Fixed Releases: 15.2(5.4.62i)E2."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la implementación de la funcionalidad Common Industrial Protocol (CIP) en Cisco Industrial Ethernet 2000 Series Switches podría permitir a un atacante remoto no autenticado provocar una condición de denegación de servicio (DoS) debido a una fuga del sistema de memoria. Más Información: CSCvc54788. Lanzamientos Afectados Conocidos: 15.2(5.4.32i)E2. Lanzamientos Reparados Conocidos: 15.2(5.4.62i)E2."
}
],
"lastModified": "2026-06-17T01:18:58.203",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_series_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64126B06-A388-40D2-A0A7-6520BCC90EE8",
"versionEndIncluding": "15.2\\(5.4.32i\\)e2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_16ptc-g-e_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "524D907D-4DDC-4439-A9E0-328BA272BE79"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_16ptc-g-l_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4057243E-C776-4048-AF08-F1339DECFB76"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_16ptc-g-nx_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F0D7518A-B5EA-493C-80C7-4938A36FF621"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_16t67-b_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0474966A-3F71-474F-926F-D4C03F0989D5"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_16t67p-g-e_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "199F317F-4C29-4BE4-B5EE-FFD70C693A74"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-g-e_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A805F6F4-D977-493F-B3E8-CCE64A6F5AE4"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-g-l_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6DB0122F-82AB-467A-861B-9A9EAF36F695"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-g-n_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "69A29BB0-4033-4067-97E9-372C797A29CC"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-g-x_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "334BC0D6-E9D8-47F5-AB48-7AB3F3A17844"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_16tc-l_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2F1931F1-02FC-4F7D-8C18-C1482CD2530D"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_24t67-b_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C8F9FB2B-D9AD-46DD-8D2E-0FB71E2EA825"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_4s-ts-g-b_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "75325EB7-ABB8-409F-BB8E-1696FB3D0DA7"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_4s-ts-g-l_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "03CB2133-041C-48EE-8594-2F80C7A89A05"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_4t-b_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1C4D3841-67B6-4E21-A68D-FED30EC2CDEF"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_4t-g-b_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E906703D-3946-4EE7-BEF1-9753409FEEF8"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_4t-g-l_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D64C4436-6BB8-48EB-923D-11B6F9F18B1D"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_4t-l_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3ECD0A92-A198-463B-8046-92D738C40DAF"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_4ts-b_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "87C75A46-74FC-4AF1-AF76-0CAC422473E5"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_4ts-g-b_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5FE4BC00-19FE-468C-8BCE-193E72066B0E"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_4ts-g-l_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "62729BD3-975A-4FCA-B255-FFFD51901081"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_4ts-l_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0FAB865C-D5D6-474F-B42C-2C2958B1E876"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_8t67-b_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CE94DAA2-D52A-424B-8E17-FC17D4B117B4"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_8t67p-g-e_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "429B7E0E-2897-4838-AC6B-41B3A5D85204"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-b_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "22980E67-0A91-473F-9F86-3B594D7BE9FF"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-g-b_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4360DC5A-DD47-42C5-9940-B9FE24422758"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-g-e_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "417ACF82-6769-4441-92CB-8BD06470518A"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-g-l_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "36036C1F-2A42-4633-AFD7-F4F8DEADBDE7"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-g-n_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FEE1A077-564B-49A3-84C4-3E9EA6EA7675"
},
{
"criteria": "cpe:2.3:h:cisco:industrial_ethernet_2000_8tc-l_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1DAFB25E-F057-423E-811D-1E4A8F9E2D73"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}