8.8
CVSSv3

CVE-2017-6689

Published: 13/06/2017 Updated: 03/10/2019
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote malicious user to log in to an affected system as the admin user, aka an Insecure Default Administrator Credentials Vulnerability. More Information: CSCvc76661. Known Affected Releases: 2.2(9.76).

Vulnerable Product Search on Vulmon Subscribe to Product

cisco elastic services controller 2.2\\(9.76\\)

Vendor Advisories

A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the admin user The vulnerability is due to the existence of a default, weak, hard-coded password for the admin user of an affected system An attacker could exploit this vulnerability by logging i ...