Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2017-12355

Quick assessment

Affected

n/a Cisco IOS XR

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco IOS XR Software是美国思科（Cisco）公司的IOS软件系列（包括IOS T、IOS S和IOS XR）中的一套完全模块化、分布式的网络操作系统。 Cisco IOS XR Software中的Local Packet Transport Services (LPTS) ingress帧处理功能存在拒绝服务漏洞，该漏洞源于程序没有充分的验证LPTS帧。远程攻击者可通过向受影响系统的管理界面发送特制的XML请求利用该漏洞造成拒绝服务（LPTS进程重启）。

AI Predicted 6.5 Difficulty: Moderate EPSS 3.07% · P88 Updated Feb 21, 2026

Possible ATT&CK Techniques 2 AI

T1059 · Command and Scripting Interpreter T1984

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2017-12355

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

A vulnerability in the Local Packet Transport Services (LPTS) ingress frame-processing functionality of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause one of the LPTS processes on an affected system to restart unexpectedly, resulting in a brief denial of service (DoS) condition. The vulnerability is due to incomplete LPTS frame validation by the affected software. An attacker could exploit this vulnerability by sending crafted XML requests to the management interface of an affected system. A successful exploit could allow the attacker to cause one of the LPTS processes on the affected system to restart unexpectedly, which would impact LPTS traffic and cause a brief DoS condition while the process restarts. Cisco Bug IDs: CSCvf76332.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

资源管理错误

Source: CVE Program / CVE List V5

Vulnerability Title

Cisco IOS XR Software 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	Cisco IOS XR	Cisco IOS XR	-

II. Public POCs for CVE-2017-12355

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2017-12355

请登录查看更多情报信息。

Vendor Advisories for CVE-2017-12355 (3)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171129-ios-xr x_refsource_CONFIRM
http://www.securityfocus.com/bid/101989 vdb-entry x_refsource_BID
http://www.securitytracker.com/id/1039927 vdb-entry x_refsource_SECTRACK

https://www.cve.org/CVERecord?id=CVE-2017-12355

Same Patch Batch · n/a · 2017-11-30 · 56 CVEs total

CVE-2017-12359		多款Cisco产品WebEx Advanced Recording Format Player 缓冲区错误漏洞
CVE-2017-14198		Squiz Matrix 安全漏洞
CVE-2017-12370		多款Cisco产品WebEx Recording Format Player和Advanced Recording Format Player 安全漏洞
CVE-2017-14196		Squiz Matrix File Bridge插件路径遍历漏洞
CVE-2017-12372		多款Cisco产品WebEx Recording Format Player和Advanced Recording Format Player 安全漏洞
CVE-2017-12371		多款Cisco产品WebEx Recording Format Player和Advanced Recording Format Player 安全漏洞
CVE-2017-14197		Squiz Matrix Matrix WYSIWYG插件跨站脚本漏洞
CVE-2017-12362		Cisco Meeting Server 安全漏洞
CVE-2017-12361		Cisco Jabber for Windows 信息泄露漏洞
CVE-2017-12360		Cisco WebEx Business Suite meeting site和Cisco WebEx Meetings site WebEx Recording Format P
CVE-2017-12363		Cisco WebEx Meeting Server 安全漏洞
CVE-2017-12358		Cisco Jabber for Windows、Mac、Android和iOS Cisco Jabber 跨站脚本漏洞
CVE-2017-12357		Cisco Unified Communications Manager 跨站脚本漏洞
CVE-2017-12356		Cisco Jabber for Windows、Mac、Android和iOS Cisco Jabber 跨站脚本漏洞
CVE-2017-12354		Cisco Secure Access Control System 信息泄露漏洞
CVE-2017-12353		Cisco Email Security Appliance Cisco AsyncOS Software Multipurpose Internet Mail Extension
CVE-2017-12352		Cisco Application Policy Infrastructure Controller 命令注入漏洞
CVE-2017-12351		多款Cisco产品NX-OS System Software 安全漏洞
CVE-2017-12349		Cisco UCS Central Software 安全漏洞
CVE-2017-12348		Cisco UCS Central Software 跨站脚本漏洞

Showing top 20 of 56 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Cisco IOS XR

Same vendor: n/a

Same weakness: CWE-399