medium6.5Known exploited
CVE-2017-6663
Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-03. Federal due date: 2022-03-24.
Apply updates per vendor instructions.
Impact
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. More Information: CSCvd88936. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ios | Versions 15.2\(3\)e, 15.2\(3\)e1, 15.2\(3\)e2, 15.2\(3\)e3, 15.2\(3\)e4, 15.2\(3\)e5 |
| Cisco | Ios Xe | Versions 3.7.0e, 3.7.1e, 3.7.3e, 3.8.0e, 3.8.0ex, 3.8.1e |
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://www.securityfocus.com/bid/99973
- http://www.securitytracker.com/id/1038999
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anidos
- http://www.securityfocus.com/bid/99973
- http://www.securitytracker.com/id/1038999
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anidos
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6663