Cisco Ultra Services Framework vulnerabilities
3 known CVE vulnerabilities in Cisco Ultra Services Framework, translated and rated.
- CVE-2017-6680High
A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create arbitrary directories on the affected system.
- CVE-2017-6709Critical
A vulnerability in the AutoVNF tool for the Cisco Ultra Services Framework allows an unauthenticated, remote attacker to access administrative credentials for Cisco Elastic Services Controller and Cisco OpenStack deployments. The issue arises from logging credentials in clear text.
- CVE-2017-6708Critical
A vulnerability in the symbolic link (symlink) creation functionality of the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to read sensitive files or execute malicious code on an affected system. The vulnerability is due to the absence of validation checks for the input that is used to create symbolic links.