CVE-2017-6680
HighSummary
A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create arbitrary directories on the affected system.
Risk Assessment
An attacker could exploit this vulnerability to manipulate the file structure of the system, potentially leading to further attacks or data leakage.
Recommendation
It is recommended to update to the latest software version to mitigate this vulnerability and to monitor the system for unauthorized activities.
Other vulnerabilities in Cisco Ultra Services Framework
See all- CVE-2017-6709Critical
A vulnerability in the AutoVNF tool for the Cisco Ultra Services Framework allows an unauthenticated, remote attacker to access administrative credentials for Cisco Elastic Services Controller and Cisco OpenStack deployments. The issue arises from logging credentials in clear text.
- CVE-2017-6708Critical
A vulnerability in the symbolic link (symlink) creation functionality of the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to read sensitive files or execute malicious code on an affected system. The vulnerability is due to the absence of validation checks for the input that is used to create symbolic links.
Original NVD description (English source)
A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create arbitrary directories on the affected system. More Information: CSCvc76652. Known Affected Releases: 21.0.0.