CVE-2017-6692
HighSummary
A vulnerability in Cisco Ultra Services Framework Element Manager allows an authenticated, remote attacker to log in to the device with root user privileges, known as an Insecure Default Account Information Vulnerability.
Risk Assessment
An attacker could gain full access to the device, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to change default login credentials and update the software to the latest version to mitigate the risk.
Other vulnerabilities in Cisco Ultra Services Framework Element Manager
See all- CVE-2017-6687High
A vulnerability in Cisco Ultra Services Framework Element Manager allows an authenticated, remote attacker with access to the management network to log in to the affected device using default credentials present on the system.
- CVE-2017-6686High
A vulnerability in Cisco Ultra Services Framework Element Manager allows an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device. This is known as an Insecure Default Credentials Vulnerability.
Original NVD description (English source)
A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log in to the device with the privileges of the root user, aka an Insecure Default Account Information Vulnerability. More Information: CSCvd85710. Known Affected Releases: 21.0.v0.65839.