Junglewise Threat Intelligence

CVE-2017-6663: Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability

CVE-2017-6663 · Severity: critical · CVSS 6.5 · Exploited in the wild · Published 2022-03-03

Technologies: Cisco IOS, Cisco Ios Software, Cisco IOS XE Software, Cisco IOS XE, Cisco IOS XR. Vendors: Cisco.

Executive brief

A vulnerability in the Autonomic Networking feature of Cisco IOS and IOS XE Software allows an unauthenticated, adjacent attacker to cause a denial-of-service (DoS) condition. The flaw enables an attacker to trigger a reload of autonomic nodes on the affected system.

Affected products

  • Cisco IOS Software 15.2(3)E, 15.3(3)S, 15.4(1)S
  • Cisco IOS XE Software Denali-16.2.1, Denali-16.3.1

Timeline

  • 2017-07-26: disclosed: Original Cisco advisory date (from URL)
  • 2022-03-03: kev added: Added to CISA Known Exploited Vulnerabilities Catalog

Related threats