What’s Vulnerable › Vulnerabilities

CVE-2017-6664

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-07 · updated 2026-06-17
• Weakness: CWE-295

Description

A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to access the Autonomic Networking infrastructure of an affected system, after the certificate for the autonomic node has been revoked. This vulnerability affected devices that are running Release 16.x of Cisco IOS XE Software and are configured to use Autonomic Networking. This vulnerability does not affect devices that are running an earlier release of Cisco IOS XE Software or devices that are not configured to use Autonomic Networking. More Information: CSCvd22328. Known Affected Releases: 15.5(1)S3.1 Denali-16.2.1.

Affected products

• Cisco IOS XE: 3.10.8as, 3.10.8s, 3.12.0s, 3.12.1s, 3.12.2s, 3.12.3s (+23)

References

• http://www.securityfocus.com/bid/99986
• http://www.securitytracker.com/id/1038997
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anicrl
• http://www.securityfocus.com/bid/99986
• http://www.securitytracker.com/id/1038997
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anicrl

Get alerted when CVE-2017-6664 or the next vulnerability affects your stack