CVE-2017-6714
CriticalSummary
A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server allows an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The issue is due to improper shell invocations.
Risk Assessment
An attacker could exploit this vulnerability to gain full control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade to version 5.0.3 or 5.1 of the Cisco Ultra Services Framework Staging Server to mitigate this vulnerability.
Original NVD description (English source)
A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The vulnerability is due to improper shell invocations. An attacker could exploit this vulnerability by crafting CLI command inputs to execute Linux shell commands as the root user. This vulnerability affects all releases of Cisco Ultra Services Framework Staging Server prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvc76673.