Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability

MITTEL 6.5EXPLOITED (CISA KEV)CVE-2017-6663 · Published 07/08/2017 · updated 17/06/2026

Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/03/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
IOS and IOS XE Software Cisco	Versions not published yet (product named by CISA KEV)

Description

A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. More Information: CSCvd88936. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.

References

securityfocus.com/bid/99973 · Broken Link
securitytracker.com/id/1038999 · Broken Link
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anidos · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2017-6663

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free