---
id: CVE-2017-6664
title: >-
  Cisco IOS XE Software Autonomic Networking Infrastructure Certificate
  Revocation Vulnerability (CVE-2017-6664)
summary: >-
  A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software
  could allow an unauthenticated, remote, autonomic node to access the Autonomic
  Networking infrastructure of an affected system, after the certificate for the
  auto…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N'
cvssSource: vendor
vendor: Cisco
product: Cisco IOS XE Software
affected:
  - ios_xe_software 16.1.2
  - ios_xe_software 16.2.1
  - ios_xe_software 16.3.1
  - ios_xe_software 16.4.1
  - ios_xe_software 16.1.3
  - ios_xe_software 16.2.2
  - ios_xe_software 16.3.2
  - ios_xe_software 16.3.3
  - ios_xe_software 16.4.2
  - ios_xe_software 16.5.1
  - ios_xe_software 16.6.1
  - ios_xe_software 16.7.1
  - ios_xe_software 16.8.1
  - ios_xe_software 16.3.1a
  - ios_xe_software 16.3.4
  - ios_xe_software 16.5.1a
  - ios_xe_software 16.9.1
  - ios_xe_software 16.10.1
  - ios_xe_software 16.5.1b
  - ios_xe_software 16.11.1
  - ios_xe_software 16.12.1
  - ios_xe_software 16.6.2
  - ios_xe_software 16.3.5
  - ios_xe_software 16.5.2
  - ios_xe_software 16.3.5b
  - ios_xe_software 16.4.3
  - ios_xe_software 16.3.6
  - ios_xe_software 16.6.3
  - ios_xe_software 16.9.2
  - ios_xe_software 16.5.3
  - ios_xe_software 16.6.4
  - ios_xe_software 16.8.1a
  - ios_xe_software 16.8.1b
  - ios_xe_software 16.8.1s
  - ios_xe_software 16.7.2
  - ios_xe_software 16.8.1c
  - ios_xe_software 16.3.7
  - ios_xe_software 16.6.5
  - ios_xe_software 16.9.1a
  - ios_xe_software 16.9.1b
published: '2017-07-26'
updated: '2018-01-31'
sourceUpdated: '2018-01-31T14:47:00+00:00'
source: CSAF
sourceUrl: >-
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anicrl
references:
  - url: >-
      https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anicrl
  - url: 'https://software.cisco.com'
tags:
  - csaf
  - vendor-advisory
  - cisco
epss: 0.00924
epssPercentile: 0.58895
ingestedAt: '2026-09-08T15:58:18.537Z'
---

## Overview

A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to access the Autonomic Networking infrastructure of an affected system, after the certificate for the autonomic node has been revoked.

The vulnerability exists because the affected software does not transfer certificate revocation lists (CRLs) across Autonomic Control Plane (ACP) channels. An attacker could exploit this vulnerability by connecting an autonomic node, which has a known and revoked certificate, to the autonomic domain of an affected system. A successful exploit could allow the attacker to insert a previously trusted autonomic node into the autonomic domain of an affected system after the certificate for the node has been revoked.

There are no workarounds that address this vulnerability.

## Vendor advisories

- **cisco-sa-20170726-anicrl** · Cisco · affected: Cisco IOS XE Software (118 versions) · updated 2018-01-31 · [advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170726-anicrl)

**Cisco IOS XE Software Autonomic Networking Infrastructure Certificate Revocation Vulnerability**. Released 2017-07-26, updated 2018-01-31.

Affected:

- Cisco IOS XE Software 16.1.2
- Cisco IOS XE Software 16.2.1
- Cisco IOS XE Software 16.3.1
- Cisco IOS XE Software 16.4.1
- Cisco IOS XE Software 16.1.3
- Cisco IOS XE Software 16.2.2
- Cisco IOS XE Software 16.3.2
- Cisco IOS XE Software 16.3.3
- Cisco IOS XE Software 16.4.2
- Cisco IOS XE Software 16.5.1
- Cisco IOS XE Software 16.6.1
- Cisco IOS XE Software 16.7.1
- Cisco IOS XE Software 16.8.1
- Cisco IOS XE Software 16.3.1a
- Cisco IOS XE Software 16.3.4
- Cisco IOS XE Software 16.5.1a
- Cisco IOS XE Software 16.9.1
- Cisco IOS XE Software 16.10.1
- Cisco IOS XE Software 16.5.1b
- Cisco IOS XE Software 16.11.1
- Cisco IOS XE Software 16.12.1
- Cisco IOS XE Software 16.6.2
- Cisco IOS XE Software 16.3.5
- Cisco IOS XE Software 16.5.2
- Cisco IOS XE Software 16.3.5b
- Cisco IOS XE Software 16.4.3
- Cisco IOS XE Software 16.3.6
- Cisco IOS XE Software 16.6.3
- Cisco IOS XE Software 16.9.2
- Cisco IOS XE Software 16.5.3
- Cisco IOS XE Software 16.6.4
- Cisco IOS XE Software 16.8.1a
- Cisco IOS XE Software 16.8.1b
- Cisco IOS XE Software 16.8.1s
- Cisco IOS XE Software 16.7.2
- Cisco IOS XE Software 16.8.1c
- Cisco IOS XE Software 16.3.7
- Cisco IOS XE Software 16.6.5
- Cisco IOS XE Software 16.9.1a
- Cisco IOS XE Software 16.9.1b

## Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com