Product:
Cisco IOS Software and Cisco IOS XE Software
Summary
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service condition. This vulnerability affects specific releases and can lead to significant service disruption.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2017-6663 |
Exploitation
An attacker on an adjacent network can exploit this vulnerability by sending specially crafted packets to the affected system. If successful, this can trigger a reload of the autonomic nodes, leading to a denial of service. The attack does not require authentication, making it easier for potential attackers to exploit the vulnerability.
Affected Products
- Denali-16.2.1: Affected release that may experience denial of service due to the vulnerability.
- Denali-16.3.1: Another affected release susceptible to the same denial of service condition.
Mitigation
To mitigate this vulnerability, it is recommended to apply updates as per the vendor’s instructions. Keeping the software up to date will help protect against potential exploitation of this vulnerability.