CVE-2017-12786Noviware Memory Corruption
Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are…
Published Aug 22, 2017 · Updated May 12, 2026
Key Facts
Patch immediately- CVE-2017-12786 is a critical-severity vulnerability (CVSS 9.8 v3) affecting Noviware (Noviflow).
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 25% probability of exploitation in the next 30 days.
- Fixed versions are available, including Noviware 400.2.6.
- Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Scores
CVSS v3
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
25%
Higher than 97.9% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
38/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
1
Proof-of-concept links
In-the-wild evidence
0
Reports of active use
Advisories And Exploit References
- advisory42518
Description
Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are applied.
This could be leveraged by remote, unauthenticated attackers to gain resultant privileged (root) code execution on the switch, because there is a stack-based buffer overflow during unserialization of packet data.
Affected Products
1 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| NoviwareNoviflow | See advisory | 400.2.6 |
Patched Releases
Noviware
400.2.6
Timeline
Publicly disclosed
Aug 22, 2017
Last updated
May 12, 2026
Weakness Type
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
- advisory42518
- exploitExploitDB-42518
FAQ
Common Questions.
Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are applied.
Affected: Noviware (Noviflow). The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Noviware 400.2.6.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Is CVE-2017-12786 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo