CVE-2017-6687
HighSummary
A vulnerability in Cisco Ultra Services Framework Element Manager allows an authenticated, remote attacker with access to the management network to log in to the affected device using default credentials present on the system.
Risk Assessment
An attacker could gain unauthorized access to the device, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to change default credentials to strong, unique passwords and to monitor access to the management network.
Other vulnerabilities in Cisco Ultra Services Framework Element Manager
See all- CVE-2017-6692High
A vulnerability in Cisco Ultra Services Framework Element Manager allows an authenticated, remote attacker to log in to the device with root user privileges, known as an Insecure Default Account Information Vulnerability.
- CVE-2017-6686High
A vulnerability in Cisco Ultra Services Framework Element Manager allows an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device. This is known as an Insecure Default Credentials Vulnerability.
Original NVD description (English source)
A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in to the affected device using default credentials present on the system, aka an Insecure Default Password Vulnerability. More Information: CSCvc76695. Known Affected Releases: 21.0.0.