EXPOSURES › CVE-2017-6663
CVE-2017-6663
HIGH ⌖ ON CISA KEV · EXPLOITEDAn unauthenticated adjacent attacker could force Cisco IOS/IOS XE autonomic nodes to reload, causing a denial-of-service.
This DoS vulnerability in the Autonomic Networking feature allows an unauthenticated attacker to trigger system reboots, disrupting network availability. DIB organizations must ensure continuous patching of Cisco IOS and IOS XE, as these foundational networking platforms have a persistent history of high-severity vulnerabilities that can be exploited in the wild.
Shame score — The vulnerability is actively exploited in the wild (KEV) and affects foundational networking infrastructure, but it is a known DoS issue rather than a data breach or RCE, resulting in moderate embarrassment.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in denial-of-service (DoS).
| PRODUCT | STATUS |
|---|---|
| AppDynamics GovAPM AppDynamics (a Cisco company) |
Authorized |
| Cisco Cloudlock for Government Cisco Systems Inc. |
Authorized |
| Cisco Meraki for Government Cisco Systems Inc. |
In Process |
| Cisco SD-WAN for Government Cisco Systems Inc. |
In Process |
| Cisco Umbrella for Government Cisco Systems Inc. |
In Process |
| Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc. |
Authorized |
| Duo Federal Duo Security (A Cisco Company) |
Authorized |
| WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc. |
In Process |
| Webex for Government Cisco Systems Inc. |
Authorized |