CVE-2017-6686
HighSummary
A vulnerability in Cisco Ultra Services Framework Element Manager allows an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device. This is known as an Insecure Default Credentials Vulnerability.
Risk Assessment
Attackers may gain full access to the device, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to change default credentials and restrict access to the management network to trusted users only.
Other vulnerabilities in Cisco Ultra Services Framework Element Manager
See all- CVE-2017-6692High
A vulnerability in Cisco Ultra Services Framework Element Manager allows an authenticated, remote attacker to log in to the device with root user privileges, known as an Insecure Default Account Information Vulnerability.
- CVE-2017-6687High
A vulnerability in Cisco Ultra Services Framework Element Manager allows an authenticated, remote attacker with access to the management network to log in to the affected device using default credentials present on the system.
Original NVD description (English source)
A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76699. Known Affected Releases: 21.0.0.