CVE-2017-6663

medium · 6.5Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2022-03-03Remediation due 2022-03-24

A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. More Information: CSCvd88936. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.

6.5

CVSS

2.1%

EPSS (exploit prob.)

81st

EPSS percentile

2017-08-07

Published

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Vendor	Product	Affected versions
cisco	ios	15.2(3)e
cisco	ios	15.2(3)e1
cisco	ios	15.2(3)e2
cisco	ios	15.2(3)e3
cisco	ios	15.2(3)e4
cisco	ios	15.2(3)e5
cisco	ios	15.2(3a)e
cisco	ios	15.2(3a)e1
cisco	ios	15.2(3m)e2
cisco	ios	15.2(3m)e3
cisco	ios	15.2(3m)e6
cisco	ios	15.2(3m)e8
cisco	ios	15.2(4)e
cisco	ios	15.2(4)e1
cisco	ios	15.2(4)e2
cisco	ios	15.2(4)e3
cisco	ios	15.2(5)e
cisco	ios	15.2(5)e1
cisco	ios	15.2(5a)e
cisco	ios	15.2(5b)e
cisco	ios	15.3(3)s
cisco	ios	15.3(3)s1
cisco	ios	15.3(3)s1a
cisco	ios	15.3(3)s2
cisco	ios	15.3(3)s3
cisco	ios	15.3(3)s4
cisco	ios	15.3(3)s5
cisco	ios	15.3(3)s6
cisco	ios	15.3(3)s7
cisco	ios	15.3(3)s8
cisco	ios	15.3(3)s8a
cisco	ios	15.3(3)s9
cisco	ios	15.3(3)s10
cisco	ios	15.4(1)s
cisco	ios	15.4(1)s1
cisco	ios	15.4(1)s2
cisco	ios	15.4(1)s3
cisco	ios	15.4(1)s4
cisco	ios	15.4(2)s
cisco	ios	15.4(2)s1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-6663