CVE-2017-6667

Critical

Published: 13/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service SDK could allow an unauthenticated, remote attacker to execute arbitrary code on the affected device with the privileges of the web server.

Risk Assessment

An attacker could gain full control over the device, posing a serious security threat to the organization.

Recommendation

It is recommended to update to the latest version of the software to mitigate this vulnerability.

Original NVD description (English source)

A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (SDK) could allow an unauthenticated, remote attacker to execute arbitrary code on the affected device with the privileges of the web server. More Information: CSCvb66730. Known Affected Releases: 2.0.