PT-2017-2756 · Cisco · Cisco Ultra Services Framework Element Manager

Publicado 2017-06-13 · Atualizado 2019-10-03 · CVE-2017-6692

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Ultra Services Framework Element Manager version 21.0.v0.65839

Description The issue is related to insecure default account information, which could allow an authenticated, remote attacker to log in to the device with the privileges of the root user. This is due to errors in managing registration data.

Recommendations For version 21.0.v0.65839, update the default account information to prevent unauthorized access with root privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-255

CWE-1188

Identificadores relacionados

BDU:2017-02005

CVE-2017-6692

Produtos afetados

Cisco Ultra Services Framework Element Manager

Referências · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf6 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6692 · Nota de Segurança
• http://securityfocus.com/bid/98980 · Nota
• https://bdu.fstec.ru/vul/2017-02005 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-6692 · Aviso do Fabricante