CVE-2017-12213 is a medium-severity vulnerability affecting Cisco IOS XE Software on Catalyst 4000 Series Switches, specifically within the dynamic access control list (ACL) feature. An unauthenticated, adjacent attacker can exploit an uncaught error during 802.1x authentication failure, causing the port to fail open and bypass authentication. This allows the attacker to pass traffic to the default VLAN. While the CVSS score is 4.3 (medium), indicating a low impact on integrity and no impact on confidentiality or availability, there is no evidence of active exploitation, public exploit code, or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.