CVE-2017-6663

Cisco IOS and IOS XE

Published 7 Aug 2017 · updated 17 Jun 2026 · Analyzed

6.5 Medium · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 3 Mar 2022, with a remediation deadline of 24 Mar 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. More Information: CSCvd88936. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.

References

www.securityfocus.com/bid/99973 · Broken Link, Third Party Advisory, VDB Entry
www.securitytracker.com/id/1038999 · Broken Link, Third Party Advisory, VDB Entry
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anidos · Vendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6663 · US Government Resource