CVE-2017-6767
HighSummary
A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) allows an authenticated, remote attacker to gain higher privileges than those assigned to their account. The attacker is granted the privileges of the last user to log in, regardless of whether those privileges are higher or lower.
Risk Assessment
The organization may be exposed to unauthorized actions, as the attacker can execute CLI commands that should be restricted by their assigned role. While root-level privileges cannot be obtained, the risk of abuse remains significant.
Recommendation
It is recommended to update Cisco APIC software to the latest version to mitigate this vulnerability and to review and adjust user access policies.
Other vulnerabilities in Cisco Application Policy Infrastructure Controller (APIC)
See all- CVE-2017-6768High
A vulnerability in the build procedure for certain executable system files on Cisco APIC devices could allow an authenticated, local attacker to gain root-level privileges. The issue arises from the use of relative search paths for libraries without proper validation.
- CVE-2016-1420High
The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files, allowing local users to obtain root access via unspecified vectors.
- CVE-2026-76500Critical
A security review in Cisco APIC revealed multiple vulnerabilities related to improper control of a resource through its lifetime (CWE-664). These have been addressed in hardening releases.
- CVE-2026-76499Critical
A security review in Cisco APIC revealed multiple vulnerabilities related to improper neutralization issues (CWE-707). These have been addressed in hardening releases.
- CVE-2026-76498Critical
A security review in Cisco APIC revealed multiple vulnerabilities related to improper access control (CWE-284). These have been addressed in hardening releases.
- CVE-2026-76488Medium
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. Exploitation requires valid administrative credentials. The vulnerability is due to insufficient access control to file system resources.
- CVE-2026-20321Medium
A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root user. The vulnerability is due to insufficient input validation of user-controlled command arguments. Exploitation requires valid administrative credentials.
Original NVD description (English source)
A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to gain higher privileges than the account is assigned. The attacker will be granted the privileges of the last user to log in, regardless of whether those privileges are higher or lower than what should have been granted. The attacker cannot gain root-level privileges. The vulnerability is due to a limitation with how Role-Based Access Control (RBAC) grants privileges to remotely authenticated users when login occurs via SSH directly to the local management interface of the APIC. An attacker could exploit this vulnerability by authenticating to the targeted device. The attacker's privilege level will be modified to match that of the last user to log in via SSH. An exploit could allow the attacker to gain elevated privileges and perform CLI commands that should be restricted by the attacker's configured role. Cisco Bug IDs: CSCvc34335. Known Affected Releases: 1.0(
Vulnerability data from NVD (NIST) · CISA KEV · EPSS