Apply updates per vendor instructions.
Evidence dossier
CVE-2017-12231
CVE-2017-12231
gen-56ccdaf9Normalized restatement
A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper translation of H.323 messages that use the Registration, Admission, and Status (RAS) protocol and are sent to an affected device via IPv4 packets. An attacker could exploit this vulnerability by sending a crafted H.323 RAS packet through an affected device. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition. This vulnerability affects Cisco devices that are configured to use an application layer gateway with NAT (NAT ALG) for H.323 RAS messages. By default, a NAT ALG is enabled for H.323 RAS messages. Cisco Bug IDs: CSCvc57217.
- State
- PUBLISHED
- Published
- Sep 28, 2017
- Updated
- Jan 14, 2026
- Evidence coverage
- 85%
2026-07-18 · v2026.06.15 · percentile 93.5%
Distinct CVSS assessments remain side by side; none are averaged.
Source comparison
Who said what
A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the improper translation of H.323 messages that use the Registration, Admission, and Status (RAS) protocol and are sent to an affected device via IPv4 packets. An attacker could exploit this vulnerability by sending a crafted H.323 RAS packet through an affected device. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition. This vulnerability affects Cisco devices that are configured to use an application layer gateway with NAT (NAT ALG) for H.323 RAS messages. By default, a NAT ALG is enabled for H.323 RAS messages. Cisco Bug IDs: CSCvc57217.
Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
Probability 0.071280000000; percentile 0.935470000000
Applicability
Cited product scope
[{"status": "affected", "version": "Cisco IOS"}]unknowncpe:2.3:h:cisco:1100-4g\/6g_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1100-lte_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1100_terminal_services_gateways:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1801_integrated_service_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1802_integrated_service_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1803_integrated_service_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1811_integrated_service_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1812_integrated_service_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1841_integrated_service_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1861_integrated_service_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1905_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1906c_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1921_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1941_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:1941w_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:4000_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8101-32fh:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8101-32h:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8102-64h:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8201-32fh:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8208:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8212:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8218:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8800_12-slot:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8800_18-slot:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8800_4-slot:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8800_8-slot:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8804:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:9800-40:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:9800-80:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:9800-cl:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:9800-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1000-esp100:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1000-esp100-x:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1000-esp200-x:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1001-hx:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1001-hx_r:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1001-x_r:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1002_fixed_router:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1002-hx:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1002-hx_r:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1002-x_r:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1006-x:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1009-x:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_1023:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_900:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9000:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9000v:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:-:*constrainedcpe:2.3:h:cisco:asr_901-12c-f-d:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901-12c-ft-d:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901-4c-f-d:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901-4c-ft-d:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901-6cz-f-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901-6cz-f-d:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901-6cz-fs-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901-6cz-fs-d:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901-6cz-ft-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901-6cz-ft-d:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901s-2sg-f-ah:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901s-2sg-f-d:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901s-3sg-f-ah:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901s-3sg-f-d:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_901s-4sg-f-d:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_902:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_902u:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_903:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_907:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_914:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-10sz-pd:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-10sz-pd_r:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-12cz-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-12cz-a_r:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-12cz-d:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-12cz-d_r:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-12sz-im:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-12sz-im_r:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-24sz-im:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-24sz-im_r:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-24sz-m:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-24sz-m_r:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-24tz-m:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-24tz-m_r:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-4sz-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-4sz-a_r:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-4sz-d:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920-4sz-d_r:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_920u-12sz-im:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9901:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9902:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9903:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9906:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9910:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9920:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:asr_9922:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48fd-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48fd-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48fd-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48uq:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48uq-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48uq-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48uq-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48ur:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48ur-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48ur-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48ur-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48uz:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48uz-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48uz-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-12x48uz-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24pd:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24pd-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24pd-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24pdm:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24pdm-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24pdm-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24pdm-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24pd-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24ps-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24ps-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24ps-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24td-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24td-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24td-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24ts-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24ts-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-24ts-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fd-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fd-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fd-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fq:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fq-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fq-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fqm:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fqm-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fqm-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fqm-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fq-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fs-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fs-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48fs-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48pd-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48pd-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48pd-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48pq-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48pq-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48pq-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48ps-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48ps-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48ps-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48td-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48td-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48td-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48tq-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48tq-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48tq-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48ts-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48ts-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-48ts-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-8x24pd-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-8x24pd-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-8x24pd-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-8x24uq:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-8x24uq-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-8x24uq-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3650-8x24uq-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-12s-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-12s-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-12x48u:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-12xs-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-12xs-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-16xs-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-16xs-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24p-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24p-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24p-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24pw-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24s-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24s-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24t-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24t-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24t-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24u:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24u-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24u-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24u-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24xs:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24xs-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24xs-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24xu:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24xu-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24xu-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-24xu-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-32xs-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-32xs-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48f-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48f-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48f-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48p-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48p-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48p-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48pw-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48t-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48t-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48t-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48u:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48u-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48u-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48u-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48xs:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48xs-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48xs-f-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48xs-f-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-48xs-s:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-nm-2-40g:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_3850-nm-8-10g:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_8200:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_8300:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_8300-1n1s-4t2x:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_8300-1n1s-6t:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_8300-2n2s-4t2x:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_8300-2n2s-6t:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_8500:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_8500-4qc:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_8500l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_8510csr:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_8510msr:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_8540csr:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_8540msr:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9200:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9200cx:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9200l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-24p-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-24p-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-24s-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-24s-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-24t-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-24t-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-24u-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-24u-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-24ux-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-24ux-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-48p-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-48p-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-48s-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-48s-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-48t-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-48t-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-48u-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-48u-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-48un-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-48un-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-48uxm-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300-48uxm-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-24p-4g-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-24p-4g-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-24p-4x-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-24p-4x-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-24t-4g-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-24t-4g-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-24t-4x-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-24t-4x-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-48p-4g-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-48p-4g-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-48p-4x-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-48p-4x-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-48t-4g-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-48t-4g-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-48t-4x-a:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l-48t-4x-e:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300lm:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300l_stack:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9300x:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9500:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9500h:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9600:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9600_supervisor_engine-1:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9600x:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9800-40:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9800-40_wireless_controller:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9800-80:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9800-80_wireless_controller:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9800-cl:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9800_embedded_wireless_controller:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9800-l:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9800-l-c:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_9800-l-f:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_ie3200_rugged_switch:-:*:*:*:*:*:*:*constrainedcpe:2.3:h:cisco:catalyst_ie3300_rugged_switch:-:*:*:*:*:*:*:*constrainedcpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*; start including 12.4; end including 15.6supportedAssessments
CVSS by origin
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HAV:N/AC:L/Au:N/C:N/I:N/A:CCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLimitations and unknowns
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
- NVD-carried upstream facts remain derivative and are not independent corroboration.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Factor D is unknown in Public Core because no accepted canonical mapping-obligation ledger is present.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.