The vulnerability lies in the built-in procedure executed by the system during the loading of the automation software for Application Policy Infrastructure Controller. This vulnerability allows a perpetrator to increase their privileges, gain access to root directories, and exercise full control over the device.

🗓️ 15 Sep 2017 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 9 Views

Vulnerability in APIC installer enables privilege escalation and full control via malicious library.

Reporter	Title	Published	Views	Family All 10
Cisco	Cisco Application Policy Infrastructure Controller Custom Binary Privilege Escalation Vulnerability	16 Aug 201716:00	–	cisco
Tenable Nessus	Cisco Application Policy Infrastructure Controller Custom Binary Privilege Escalation Vulnerability	25 Aug 201700:00	–	nessus
CNVD	Cisco Application Policy Infrastructure Controller Local Elevation of Privilege Vulnerability	17 Aug 201700:00	–	cnvd
CVE	CVE-2017-6768	17 Aug 201720:00	–	cve
Cvelist	CVE-2017-6768	17 Aug 201720:00	–	cvelist
EUVD	EUVD-2017-15822	7 Oct 202500:30	–	euvd
NVD	CVE-2017-6768	17 Aug 201720:29	–	nvd
OpenVAS	Cisco Application Policy Infrastructure Controller Custom Binary Privilege Escalation Vulnerability	17 Aug 201700:00	–	openvas
OSV	CVE-2017-6768	17 Aug 201720:29	–	osv
Prion	Design/Logic Flaw	17 Aug 201720:29	–	prion

Vulners

Node

cisco_systems application_policy_infrastructure_controllerMatch1.2.2

Source	Link
securityfocus	www.securityfocus.com/bid/100363
securitytracker	www.securitytracker.com/id/1039179
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-apic2
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 27.2

EPSS0.00422

application policy controller privilege escalation root directory access malicious library installation vulnerability access control deficiency