Cisco Catalyst 6800 Series Switches VPLS Denial‑of‑Service Vulnerability (CVE‑2017‑12238)
What It Is — A flaw in the Virtual Private LAN Service (VPLS) code of Cisco IOS for Catalyst 6800 series switches that permits an unauthenticated, adjacent attacker to cause a denial‑of‑service.
Exploitability — No public exploit code, but the vulnerability can be triggered from the same LAN segment without credentials; CVSS v3.1 base score 7.5 (High).
Affected Products — Cisco Catalyst 6800 Series Switches running the affected IOS releases (see Cisco advisory).
Why It Matters for Trust & Control Assurance
- Continuous monitoring of network‑device health gives early, auditable evidence that a DoS event is detected and mitigated, satisfying availability‑related control objectives.
- Documented patch‑management and remediation steps provide defensible proof of due‑diligence for auditors across frameworks.
- Demonstrable oversight of critical infrastructure aligns with enterprise buyers’ expectations for a trustworthy supply‑chain posture.
Recommended Actions
- Apply Cisco’s security‑advisory patch without delay.
- Verify that VPLS traffic is being logged and that alerts fire on abnormal patterns.
- Record the remediation workflow in your control‑evidence repository to streamline future audit readiness.
Source: CISA KEV – CVE‑2017‑12238