Skip to content

September 2017 · Band 1

Exploited in the wild

13 CVEs · 13 exploited

Each square is a CVE listed by CISA as exploited. The named ones are the most likely to be exploited again.

exploited in the wild
13

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

  1. Apache Tomcat Servers - Remote Code ExecutionCVE-2017-12615Apache Software Foundation · CVSS 8.1 · 100% likely

    CWE-434Apache

  2. Apache Struts2 S2-052 - Remote Code ExecutionCVE-2017-9805Apache Software Foundation · CVSS 8.1 · 99% likely

    CWE-502Apache

  3. Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework…CVE-2017-8759Microsoft Corporation · CVSS 7.8 · 89% likely

    CWE-94MicrosoftCobalt GroupLeviathan

  4. The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.CVE-2015-1187D-Link and TRENDnet · CVSS 9.8 · 83% likely

    CWE-287D-Link and TRENDnet

  5. The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrar…CVE-2017-12240Cisco · CVSS 9.8 · 14% likely

    CWE-20Cisco

  6. A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attac…CVE-2017-12237Cisco · CVSS 7.5 · 7.1% likely

    CWE-399Cisco

  7. A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an unauthenticated, remote attacker…CVE-2017-12235Cisco · CVSS 7.5 · 7.1% likely

    CWE-20Cisco

  8. Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to ca…CVE-2017-12234Cisco · CVSS 7.5 · 7.1% likely

    CWE-20Cisco

  9. Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to ca…CVE-2017-12233Cisco · CVSS 7.5 · 7.1% likely

    CWE-20Cisco

  10. A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause a…CVE-2017-12231Cisco · CVSS 7.5 · 7.1% likely

    CWE-399Cisco

  11. A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue…CVE-2017-6627Cisco · CVSS 7.5 · 6.2% likely

    CWE-399Cisco

  12. A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthent…CVE-2017-12232Cisco · CVSS 6.5 · 2.2% likely

    CWE-399Cisco

  13. A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent atta…CVE-2017-12238Cisco · CVSS 6.5 · 2.0% likely

    CWE-399Cisco

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.