Lucene search

K
ciscoCiscoCISCO-SA-20170607-USF3
HistoryJun 07, 2017 - 4:00 p.m.

Cisco Ultra Services Framework Staging Server Insecure Default Credentials Vulnerability

2017-06-0716:00:00
tools.cisco.com
14

EPSS

0.002

Percentile

54.0%

A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the management network to log in as an admin user of the affected device.

The vulnerability is due to weak, hard-coded credentials of the admin user present on the affected device. An exploit could allow the attacker with access to the management network to log in as an admin user of the affected device.

There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf3 [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf3”]

Affected configurations

Vulners
Node
ciscoultra_services_framework_staging_serverMatchany
OR
ciscoultra_services_framework_staging_serverMatchany
VendorProductVersionCPE
ciscoultra_services_framework_staging_serveranycpe:2.3:a:cisco:ultra_services_framework_staging_server:any:*:*:*:*:*:*:*

EPSS

0.002

Percentile

54.0%

Related for CISCO-SA-20170607-USF3