CVE-2017-12244

CVE-2017-12244 is a denial-of-service vulnerability in Cisco Firepower System Software affecting various Cisco security products, including ASA 5500-X and Firepower appliances. It stems from improper input validation of IPv6 extension header packets, specifically impacting IPv6 traffic. An unauthenticated, remote attacker can exploit this by sending a malicious IPv6 packet, causing the Snort process to restart, leading to high CPU utilization or a DoS condition where traffic inspection is bypassed or dropped. The vulnerability has a CVSS v3.0 score of 8.6 (High), indicating a network-based attack with low complexity, requiring no privileges or user interaction, and resulting in high availability impact. Despite its severity, there is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. The EPSS score is very low, suggesting a low probability of exploitation in the wild.