CVE-2017-6663
Published 2017-08-07 · Updated 2026-06-17 · Source psirt@cisco.com
Summary
CVE-2017-6663 is a medium-severity (CVSS 6.5) vulnerability in Cisco IOS and IOS XE Software. CISA added it to the Known Exploited Vulnerabilities catalog on March 3, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by March 24, 2022. CISA does not currently list it as used in ransomware campaigns. Cisco has 102 vulnerabilities in the KEV catalog, 7 of them linked to ransomware.
All 102 known-exploited Cisco vulnerabilities →Description
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. More Information: CSCvd88936. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.
CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA Known-Exploited Vulnerability
Product: Cisco — IOS and IOS XE Software
Name: Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
Date added: 2022-03-03 · Due: 2022-03-24
Required action: Apply updates per vendor instructions.
References
- http://www.securityfocus.com/bid/99973
- http://www.securitytracker.com/id/1038999
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anidos
- http://www.securityfocus.com/bid/99973
- http://www.securitytracker.com/id/1038999
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anidos
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6663