8.8high
CVE-2017-6685
A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the managemen…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
8.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.5%
percentile 74%
Public exploits
0
none known
Summary
A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the management network to log in as an admin user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76681. Known Affected Releases: 21.0.0.
Exploit prediction (EPSS)
1.50% probability of exploitation in the next 30 days, higher than 74% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 8.8 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Affected products
- n/a Cisco Ultra Services Framework Staging Server
Classification
- Weakness
- CWE-1188 Initialization of a Resource with an Insecure Default
References
- tools.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf3 · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/98990 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2017-6685
- NVD: CVE-2017-6685
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.