CASCACascade Atlas

Evidence dossier

CVE-2017-12234

Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to…

Exploited in the wild (CISA KEV since Mar 3, 2022). NVD reports CVSS 3.1 7.5. EPSS estimates 7.1% exploit likelihood as of Aug 27, 2026.

66.7–68.3Priority evidence range
Evidence current through Aug 27, 2026, 6:09 PM UTC

As of Aug 27, 2026

Normalized restatement

Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc43709.

State
PUBLISHED
Published
Sep 28, 2017
Updated
Jan 12, 2026
Evidence coverage
92%

Evidence chronology

What was known when

Download this view's receipt →
  1. Source dateSource date omittedFirst observed by CASCA
    CISA-ADP

    Record text: CISA ADP Vulnrichment

    Inspect raw assertion
    Field
    container
    Value
    CISA ADP Vulnrichment
    Original evidence ↗
  2. Source dateSource date omittedFirst observed by CASCA
    cisco

    Record text: Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc43709.

    Inspect raw assertion
    Field
    container
    Value
    Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc43709.
    Original evidence ↗
  3. Source dateSource date omittedFirst observed by CASCA
    CVE Program

    Record text: CVE Program Container

    Inspect raw assertion
    Field
    container
    Value
    CVE Program Container
    Original evidence ↗
  4. Source dateFirst observed by CASCA
    CISA KEV

    Exploitation cataloged: Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

    Inspect raw assertion
    Field
    observed_exploitation
    Value
    Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
    Original evidence ↗
  5. Source dateFirst observed by CASCA
    FIRST EPSS

    EPSS score: 7.13% probability · 93.78th percentile

    Inspect raw assertion
    Field
    model_probability
    Value
    Probability 0.071280000000; percentile 0.937790000000
    Original evidence ↗
ExploitationCatalog member

CISA KEV · catalog date Mar 3, 2022 · first observed Jul 19, 2026

Exploit likelihood7.13%

FIRST EPSS · score date Aug 27, 2026 · 93.8th percentile · first observed Aug 27, 2026

SeverityCVSS 7.5

NVD · CVSS 3.1 · first observed Jul 19, 2026 · same-version scores align in this snapshot

Evidence detail

Source limits and decisions

Why each evidence state has this value

casca-unknown-reasons-v1
Exploitation statusEvidence supported

Eligible evidence is present for this bounded claim.

Revision
evidence-policy-v1.1.0
Cutoff
Aug 27, 2026
Resolution
None
Exploit likelihoodEvidence supported

Eligible evidence is present for this bounded claim.

Revision
evidence-policy-v1.1.0
Cutoff
Aug 27, 2026
Resolution
None
Severity assessmentEvidence supported

Eligible evidence is present for this bounded claim.

Revision
casca-direct-cvss-eligibility-v1
Cutoff
Aug 27, 2026
Resolution
None
Affected productsSource-reported scope

The cited source assertion is retained while canonical product linkage remains open.

Revision
casca-factor-d-obligations-v1
Cutoff
Aug 27, 2026
Resolution
Resolve identity

Source comparison

Who said what

CISA-ADPIndependent enrichment
Record text

CISA ADP Vulnrichment

Inspect raw assertion
Field
container
Value
CISA ADP Vulnrichment
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
ciscoOriginal assertion
Record text

Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc43709.

Inspect raw assertion
Field
container
Value
Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to the improper parsing of crafted CIP packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted CIP packets to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCvc43709.
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CVE ProgramDerivative copy
Record text

CVE Program Container

Inspect raw assertion
Field
container
Value
CVE Program Container
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CISA KEVOriginal assertion
Exploitation cataloged

Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

Inspect raw assertion
Field
observed_exploitation
Value
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
Source dateFirst observed by CASCAOriginal evidence ↗
FIRST EPSSOriginal assertion
EPSS score

7.13% probability · 93.78th percentile

Inspect raw assertion
Field
model_probability
Value
Probability 0.071280000000; percentile 0.937790000000
Source dateFirst observed by CASCAOriginal evidence ↗

Applicability

Cited product scope

Trace impact →
55Underlying assertions
55Canonical products
1Target assertions
54Constraint assertions

Grouped from 2 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.

Identity source boundaries
  • Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z27d65b0f-b718-4b4f-bb79-c47c68d09dfa
  • Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z955dae73-7302-438b-aee1-058d7cc5d48e

56 scope groups

cisco · source assertedn/aCisco IOSDirect source scope
Affected: Cisco IOS
Source-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Inspect raw assertion[{"status": "affected", "version": "Cisco IOS"}]
NVD CPE · HARDWAREcisco1000_integrated_services_routerEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-9bf024cf178e916b346a687100957e1486ab0e38c6fa80bc2142b827451f1ccdLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f4856e07-b3c2-4674-9584-866f6af643b2
NVD CPE · HARDWAREcisco1100-4g/6g_integrated_services_routerEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-ec81333f658411b7803c2a74fba50fc2a8571954a825307de4c11aa777cea331Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1100-4g\/6g_integrated_services_router:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 1
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a6f668b9-2c1d-4306-8286-35e67d0f67c7
NVD CPE · HARDWAREcisco1100-4g_integrated_services_routerEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-0885dd02cc9452d4f4041009f4e89e39aa9cb7b3a2241eb0568d5272a45ba686Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 2
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    0f77cd6a-83da-4f31-a128-ad6daecd623b
NVD CPE · HARDWAREcisco1100-4gltegb_integrated_services_routerEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-b9efc8776dfa030fc1668cb394abb81fc795e977fed11311afb0182182422ccbLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 3
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    62564bb8-1282-4597-a645-056298be7ccb
NVD CPE · HARDWAREcisco1100-4gltena_integrated_services_routerEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-7b470689aeb6ceafca57d7e299857f428598c78d5b6b9cf3a7ac1b46fa6cd4e3Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 4
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    80e9cc47-3d7c-437a-85be-4bb94c8af1b8
NVD CPE · HARDWAREcisco1100-4pEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-203d3bf16d201a173991094a5c26412c20376d3b0c2d1ca7ccfcf42e618bd983Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1100-4p:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 5
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    aa8d5057-138a-42c4-ba35-8077a0a60068
NVD CPE · HARDWAREcisco1100-4p_integrated_services_routerEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-61bd7c4a997f0057522432fc32977f3bee0e3ca7f1e9b52a1c315fc5b0c94b82Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 6
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    a2d2305b-b69e-4f74-a44e-07b3205ce9f7
NVD CPE · HARDWAREcisco1100-6g_integrated_services_routerEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-48496322b8049136b306dd98a470fd79e435e1ed18fde6815354449b60512192Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 7
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    2b68b363-3c57-4e95-8b13-0f9b59d551f7
NVD CPE · HARDWAREcisco1100-8pEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-cb8b73ec4db387d8d0337c48f1fb666c52cf70bc8473d9e431acc82df788f0e0Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1100-8p:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 8
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ed555b12-41f4-4d62-b519-22601fb7af8d
NVD CPE · HARDWAREcisco1100-8p_integrated_services_routerEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-397442e23e2a34298ff5a325e65f923a74b06f578053f14f452c10a8f3897e60Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 9
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    26dd41b3-1d1d-44d3-ba8e-5a66afee77e6
NVD CPE · HARDWAREcisco1100_integrated_services_routerEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-e5fb7db7e3021671cae1c5fbc328d90008a6d7f3443554172e2f56006322542aLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 11
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    1952b64c-4ae0-4ccb-86c5-8d1ff6a12822
NVD CPE · HARDWAREcisco1100-lte_integrated_services_routerEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-a7b821aaea42226be44a09c95bedd3a1b6cd867ba27bb56597900ea8599547ebLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1100-lte_integrated_services_router:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 10
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    ebe4e146-1d77-4f15-ae58-3c1ce5db62c5
NVD CPE · HARDWAREcisco1100_terminal_services_gatewaysEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-9d0603ad63bcc4f028545b291c4d1555e29c2a6b178e020ea41f643420f88cefLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1100_terminal_services_gateways:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 12
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f9a4ed65-7ded-4ead-bf37-fca71e807ca1
NVD CPE · HARDWAREcisco1101-4pEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-10ae1e458f8d15225eb2c7354ca04854c4d419ecf66ce10f97fe3a8e26975a0eLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1101-4p:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 13
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    21b10158-5235-483e-bacd-c407609ea6be
NVD CPE · HARDWAREcisco1101-4p_integrated_services_routerEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-9fda7bc5de4a65dc7bb0a3527f9fe8dac39b87fcc5d0d9c845d90d07d056b28cLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 14
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5aad4397-6dcf-493a-bd61-3a890f6f3ab2
NVD CPE · HARDWAREcisco1101_integrated_services_routerEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-6d06967d013c5208818969e6a3f9fd97997fde602c3de99ee5dc56b6b58da475Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 15
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5eb8a757-7888-4ac2-be44-b89db83c6c77
NVD CPE · HARDWAREcisco1109-2pEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-9414bc46c990a5011a92e935f8b190b626b4d784f2b2103322c71821174ee26cLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1109-2p:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 16
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    8964f9ba-6e6c-44bf-9a8c-93d081b6678c
NVD CPE · HARDWAREcisco1109-4pEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-52a7b9651e62e81a1ff3a7349e8328a5a544a6ad847bbe638163864009f7d983Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1109-4p:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 17
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    51251fe1-67d2-4903-b7d3-e0c727b9a93c
NVD CPE · HARDWAREcisco1111-4pweEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-625f29b5654a7eda0b91010950bbc0ba12fe26cfe5e0b8c4f09ea6f06a938a77Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1111-4pwe:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 18
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7262adab-296f-4dc2-9cd7-a86d7f6441c8
NVD CPE · HARDWAREcisco1111-8pwbEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-7415c886af6bd436897aced775bada77a6baf610a0278ef99cb4254a77d190e8Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1111-8pwb:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 19
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e3056b31-1977-4472-bc74-19a5b8b5ec44
NVD CPE · HARDWAREcisco1111x-8pEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-f1c9d23f94fadbd39ce5788f34f059a90b0f30d72a83e5e220147b1fb7cbfc69Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1111x-8p:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 20
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    784e4562-fe26-4049-9d23-4ca46432ee14
NVD CPE · HARDWAREcisco1113-8plteeaweEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-645fe821c8c959d1655427c48a9f3c28996d65c7b472fea850c06cdf62c4d1e7Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1113-8plteeawe:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 21
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9261a638-e2e4-4ef0-84e9-a585bf763263
NVD CPE · HARDWAREcisco1113-8pmweEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-6f7a30faefe4bd044c77bc614ae0b60758bd7b2b0d9b010db85f5ee20ec02d24Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1113-8pmwe:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 22
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    8c85463d-0b37-4746-b7ea-80f3096305e7
NVD CPE · HARDWAREcisco1113-8pweEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-c7df319ca044bbf2338f919fb66bda373a563c41ecfbdb5040e6e981b4f319a1Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:cisco:1113-8pwe:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    0 · node/1 · match 23
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    58c04e5b-ac03-440f-9007-0d6761b41f68

Affected-product evidence

Accepted scope and product mapping

1 canonical links · 1 source-reported links

Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-5972f4392170d0d1b4e75a10eb3b383835ead601c8d9b09329525407a4e1471a

Source class
Nvd cpe vulnerable target
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
390c3df9-ec89-4c61-81b0-1a6c1f5ff5d4
Source-reported scopeSource-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Vendor specified only by source · Product specified only by source

Source class
Direct cve affected
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Aug 27, 2026
Retained assertion IDs
eea38e05-b488-49a1-b0c4-c1e4c39d16f5

Assessments

CVSS by origin

7.5
NVDCVSS 3.1 · role Primary · priority eligiblevalid_matchCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.8
NVDCVSS 2.0 · role Primary · priority eligiblevalid_matchAV:N/AC:L/Au:N/C:N/I:N/A:C
7.5
CVE Program sourceCVSS 3.1 · role Secondary · priority eligiblevalid_matchCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.5
CISA-ADPCVSS 3.1 · role unknown · display onlyDirect record assessment retained outside normalized eligibilityCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Direct CVE/CNA normalized decisions

7.5Priority eligible

CISA-ADP

CVSS 3.1 · Secondary · Independent enrichment · rank 2

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Validation
Valid match
Recomputed
7.5
Decision reason
Evidence supported
Policy
casca-direct-cvss-eligibility-v1

Assessments are retained side by side under closed precedence. Cascade never averages CVSS.

Evidence boundaries

  • KEV membership is authoritative for the catalog, not proof of exposure in any environment.
  • EPSS is a dated model probability and not an individual-environment prediction.
  • Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
  • NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
  • Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
  • NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
  • Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
  • OSV aggregation and OSV-converted NVD material are not independent corroboration.
  • Red Hat facts are vendor assertions for the exact supplied products.
  • Nonmembership and not-yet-observed states are not proof of safety.