CVE-2017-6663

mediumpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.021 · 82 %ileEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV

Likely / severe?

2.12% (82nd) EPSS

CVSS 6.1 · medium

Is it mine?

373 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

added 2022-03-03remediate by 2022-03-24

required action Apply updates per vendor instructions.

EPSS · scored 2026-10-27

Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability

A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. More Information: CSCvd88936. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.06.1mediumAV:A/AC:L/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USexploitability 6.5 · impact 6.9

v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 3.6

v2.06.1mediumAV:A/AC:L/Au:N/C:N/I:N/A:Csecondary · FSTEC (BDU) RU

v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondaryexploitability 2.8 · impact 3.6

v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: no · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-284US

affected products (373)

Products and version ranges known to be affected.

n/a Cisco IOS and IOS XE≤ Cisco IOS and IOS XEenisa_euvdEU
Cisco Systems Inc. Cisco IOS≤ 3.13.8Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.13.4Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.14.3Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.14.0Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.13.6Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.13.5Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.15.2Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.14.4Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.14.2Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.14.1Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.13.7aSfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.13.6aSfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.13.5aSfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.13.2aSfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.15.4Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.15.3Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.15.1Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.15.0Sfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 3.13.2Sfstec_bduRU

showing 20 of 373

also known as (6)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

published 2017-08-07modified 2026-06-17

references (10)

External citations — patches, advisories, analysis.

http://www.securitytracker.com/id/1038999 cnnvd
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anidos cnnvd
https://www.securityfocus.com/bid/99973 cnnvd
http://www.securityfocus.com/bid/99973 enisa_euvd
http://www.securitytracker.com/id/1038999 enisa_euvd
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anidos enisa_euvd
http://www.securityfocus.com/bid/99973Broken LinkThird Party AdvisoryVDB Entrynvd
http://www.securitytracker.com/id/1038999Broken LinkThird Party AdvisoryVDB Entrynvd

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan