PT-2017-2756 · Cisco · Cisco Ultra Services Framework Element Manager

Published 2017-06-13 · Updated 2019-10-03 · CVE-2017-6692

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Ultra Services Framework Element Manager version 21.0.v0.65839

Description The issue is related to insecure default account information, which could allow an authenticated, remote attacker to log in to the device with the privileges of the root user. This is due to errors in managing registration data.

Recommendations For version 21.0.v0.65839, update the default account information to prevent unauthorized access with root privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-255

CWE-1188

Related Identifiers

BDU:2017-02005

CVE-2017-6692

Affected Products

Cisco Ultra Services Framework Element Manager

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6692 · Security Note
• https://bdu.fstec.ru/vul/2017-02005 · Security Note
• https://osv.dev/vulnerability/CVE-2017-6692 · Vendor Advisory
• http://securityfocus.com/bid/98980 · Note