CVE-2017-6663

A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. More Information: CSCvd88936. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@cisco.com

Published

2017-08-07

Last modified

2025-10-21

Known exploited (CISA KEV)

since 2022-03-03, action due 2022-03-24: Apply updates per vendor instructions.

Affected products

• Ios (Cisco)
• Ios Xe (Cisco)

References

• http://www.securityfocus.com/bid/99973
• http://www.securitytracker.com/id/1038999
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anidos
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6663