{"id":"CVE-2017-6663","kind":"vulnerability","aliases":["CVE-2017-6663"],"related":[],"title":"Cisco IOS and IOS XE Software: Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability","description":"A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. More Information: CSCvd88936. Known Affected Releases: Denali-16.2.1 Denali-16.3.1.","summary":"Cisco IOS and IOS XE routers and switches with the Autonomic Networking feature can be made to reload by a crafted packet from an adjacent network host. An attacker gets a denial of service, not code execution or data access.","severity":"high","cvss":6.5,"epss":0.02117,"exploited":true,"exploited_at":"2022-03-03T00:00:00+00:00","products":[{"name":"Cisco IOS and IOS XE Software","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["cisco","exploited","infrastructure","ios","ios-xe","network-gear"],"not_affected_if":["autonomic-networking-disabled","no-adjacent-attacker"],"how_to_check":"Run 'show running-config | include autonomic' on each Cisco IOS or IOS XE device to see whether Autonomic Networking is enabled.","fix":"Apply the Cisco IOS and IOS XE updates per the vendor advisory; the fixed versions are not named in the sources.","status":"open","published_at":"2017-08-07T06:29:00+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:24:08+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-23T21:24:08Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Cisco IOS and IOS XE updates per the vendor advisory; the fixed versions are not named in the sources.\nunknown","reach":"network","impact":"low","summary":"Cisco IOS and IOS XE routers and switches with the Autonomic Networking feature can be made to reload by a crafted packet from an adjacent network host. An attacker gets a denial of service, not code execution or data access.","category":"infrastructure","who_cares":["cisco","ios","ios-xe","network-gear"],"confidence":0.7,"needs_auth":"no","worst_case":"Device reloads repeatedly, causing network denial of service","analyst_note":"Find the affected and fixed IOS/IOS XE versions and the Cisco advisory ID from the CISA KEV entry or the Cisco PSIRT advisory for CVE-2017-6663.","how_to_check":"Run 'show running-config | include autonomic' on each Cisco IOS or IOS XE device to see whether Autonomic Networking is enabled.\nunknown","needs_analyst":true,"not_affected_if":["autonomic-networking-disabled","no-adjacent-attacker"],"user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000507,"input_tokens":2897,"output_tokens":434,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2017':21A,24A '-6663':22A,25A '16.2.1':129C '16.3.1':131C 'access':81B 'adjac':66B,102C 'affect':110C,126C 'allow':99C 'and':28A 'attack':70B,103C 'autonom':52B,86C,106C 'caus':105C 'cisco':1A,7A,11A,26A,32B,42B,90C,94C 'code':77B 'condit':121C 'could':98C 'craft':62B 'cscvd88936':124C 'cve':20A,23A 'data':80B 'denali':128C,130C 'denial':16A,73B,117C 'denial-of-servic':15A 'dos':120C 'execut':78B 'exploit':33B 'featur':54B,88C 'gear':41B 'get':71B 'host':68B 'inform':123C 'infrastructur':34B 'io':2A,4A,8A,12A,35B,37B,43B,45B,91C,95C 'ios':27A,29A 'ios-x':36B 'known':125C 'made':57B 'network':40B,53B,67B,87C 'network-gear':39B 'node':107C 'packet':63B 'releas':127C 'reload':59B,113C 'result':114C 'router':47B 'servic':18A,75B,119C 'softwar':6A,9A,14A,92C,97C 'software':31A 'switch':49B 'system':111C 'unauthent':101C 'vulner':19A,83C 'xe':5A,13A,30A,38B,46B,96C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2017-08-07T06:29:00+00:00","kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2017-6663","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6663","severity":null,"published_at":"2022-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T16:39:49+00:00","note":null},{"source":"epss","external_id":"CVE-2017-6663","url":"https://api.first.org/data/v1/epss?cve=CVE-2017-6663","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2017-6663","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-6663","severity":null,"published_at":"2017-08-07T06:29:00+00:00","modified_at":"2026-06-17T01:22:45+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}