6.5
Medium
Exploited
CVE-2017-6663 Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Description
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. More Information: CSCvd88936. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IOS and IOS XE | Versions not published |
References
- 1038999 www.securitytracker.com
- tools.cisco.com tools.cisco.com
- 99973 www.securityfocus.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Cisco IOS and IOS XE
The 25 CVEs of Cisco IOS and IOS XE →
CVE-2018-0172
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
8.6
High
CVE-2018-0174
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
8.6
High
CVE-2018-0173
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
8.6
High
CVE-2018-0155
Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
8.6
High