[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9_JO66gpDLgHukhtYy1TK4EBWczljkv6esjh0pa-qUU":3,"g5a-risk:CVE-2017-12262":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":71,"weaknesses":72,"weaknessesCount":88,"isActivelyExploited":89,"cisaInfo":15,"otxData":15,"relatedBlogPosts":90,"seoMetadata":91,"configurations":116,"relatedVendorCves":125,"notableEvents":126},"CVE-2017-12262","What is CVE-2017-12262?","A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is due to an incorrect firewall rule on the device. The misconfiguration could allow traffic sent to the public interface of the device to be forwarded to the internal virtual network of the APIC-EM. An attacker that is logically adjacent to the network on which the public interface of the affected APIC-EM resides could leverage this behavior to gain access to services listening on the internal network with elevated privileges. This vulnerability affects appliances or virtual devices running Cisco Application Policy Infrastructure Controller Enterprise Module prior to version 1.5. Cisco Bug IDs: CSCve89638.","A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauth...","2017-11-02T16:29:00.253","2025-04-20T01:37:25.86",8.8,"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","ADJACENT_NETWORK","LOW","NONE","UNCHANGED","HIGH",2.8,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:A\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",5.8,"MEDIUM",6.5,6.4,0.00781,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"cisco","application_policy_infrastructure_controller_enterprise_module","*","cpe:2.3:a:cisco:application_policy_infrastructure_controller_enterprise_module:*:*:*:*:*:*:*:*",1,[50,56,60,65,67,69],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F101647","Securityfocus",[54,55],"Third Party Advisory","VDB Entry",{"url":57,"source":58,"tags":59},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1039716","Securitytracker",[54,55],{"url":61,"source":62,"tags":63},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-20171101-apicem","Cisco",[64],"Vendor Advisory",{"url":51,"source":52,"tags":66},[54,55],{"url":57,"source":58,"tags":68},[54,55],{"url":61,"source":62,"tags":70},[64],6,[73,81],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":80},"CWE-665","Improper Initialization","The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.","This can have security implications when the associated resource is expected to have certain properties or values, such as a variable that determines whether a user has been authenticated or not.","Draft","Class",2,false,[],{"title":92,"metaDescription":93,"keywords":94,"canonicalUrl":95,"structuredData":96},"What is CVE-2017-12262? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-12262, a high severity cyber security vulnerability from 2017. A vulnerability within the firewall configuration of the Ci...","CVE-2017-12262, CVE-2017-12262 vulnerability, CVE-2017-12262 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, cisco security, application_policy_infrastructure_controller_enterprise_module vulnerability","\u002Fwhat-is\u002Fcve-2017-12262",{"@context":97,"@type":98,"headline":92,"description":93,"datePublished":10,"dateModified":11,"author":99,"publisher":103,"about":107,"mainEntityOfPage":111,"articleSection":114,"keywords":115},"https:\u002F\u002Fschema.org","TechArticle",{"@type":100,"name":101,"url":102},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":100,"name":101,"url":102,"logo":104},{"@type":105,"url":106},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":108,"name":6,"description":109,"additionalType":110},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":112,"@id":113},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-12262","Cybersecurity","CVE-2017-12262, CVE-2017-12262 vulnerability, CVE-2017-12262 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[117],{"Operator":15,"Negate":15,"Nodes":118},[119],{"Operator":120,"Negate":15,"CPEMatch":121},"OR",[122],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":123,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":124,"VersionEndIncluding":15},"0B97EEB5-77E0-44D8-88FD-437BC3E92584","1.5",[],[],{"lastModified":11,"cacheTime":128,"version":32},1792364583799,{"score":130,"band":131,"action":132,"scoredAt":133},46,"Medium","Plan remediation","2026-10-17T09:12:46.30017+00:00"]