PT-2017-17242 · Cisco · Cisco Ultra Services Framework Element Manager

Publicado 2017-06-13 · Atualizado 2019-10-03 · CVE-2017-6686

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Ultra Services Framework Element Manager version 21.0.0

Description A vulnerability exists that could allow an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device. This issue is related to insecure default credentials.

Recommendations For version 21.0.0, change the default credentials to secure ones to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-1188

Identificadores relacionados

CVE-2017-6686

Produtos afetados

Cisco Ultra Services Framework Element Manager

Referências · 4

• http://securityfocus.com/bid/98988 · Nota
• https://osv.dev/vulnerability/CVE-2017-6686 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6686 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf4 · Aviso do Fabricante