PT-2017-17268

Name of the Vulnerable Software and Affected Versions Cisco Ultra Services Framework Staging Server versions prior to 5.0.3 Cisco Ultra Services Framework Staging Server versions prior to 5.1 Description A vulnerability in the AutoIT service could allow an unauthenticated, remote attacker to...

CVE-2017-6711

Summary (CVE-2017-6711): Cisco Ultra Services Framework’s Ultra Automation Service (UAS) is vulnerable due to an insecure default ZooKeeper configuration. An unauthenticated, remote attacker could access the device via the orchestrator network, gain access to ZooKeeper znodes, and influence the s...

CVE-2017-6711

A vulnerability in the Ultra Automation Service UAS of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device. The vulnerability is due to an insecure default configuration of the Apache ZooKeeper service used by the...

CVE-2017-6709: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to access administrative credentials for Cisco Elastic Services Controller ESC and Cisco OpenStack deployments in an affected system. The vulnerability exists because the...

PT-2017-17263

Name of the Vulnerable Software and Affected Versions Cisco Ultra Services Framework versions prior to 5.0.3 and 5.1 Description A vulnerability exists in the AutoVNF tool, allowing an unauthenticated, remote attacker to access administrative credentials for Cisco Elastic Services Controller ESC...

CVE-2017-6708

A vulnerability in the symbolic link symlink creation functionality of the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to read sensitive files or execute malicious code on an affected system. The vulnerability is due to the absence of...

CVE-2017-6711: Improper Authentication

A vulnerability in the Ultra Automation Service UAS of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device. The vulnerability is due to an insecure default configuration of the Apache ZooKeeper service used by the...

CVE-2017-6714

CVE-2017-6714 affects Cisco Ultra Services Framework Staging Server; the AutoIT service allows an unauthenticated remote attacker to execute arbitrary Linux shell commands as root due to improper shell invocations. Impact is confirmed as remote, unauthenticated arbitrary command execution with ro...

CVE-2017-6708: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the symbolic link symlink creation functionality of the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to read sensitive files or execute malicious code on an affected system. The vulnerability is due to the absence of...

CVE-2017-6714: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The vulnerability is due to improper shell invocations. An attacker could exploit this vulnerability b...

PT-2017-17262

Name of the Vulnerable Software and Affected Versions Cisco Ultra Services Framework versions prior to 5.0.3 Cisco Ultra Services Framework versions prior to 5.1 Description A vulnerability in the symbolic link creation functionality of the AutoVNF tool could allow an unauthenticated, remote...

CVE-2017-6708

CVE-2017-6708 affects Cisco Ultra Services Framework via the AutoVNF symlink creation function. Root cause: lack of input validation when creating symbolic links, enabling an unauthenticated, remote attacker to read sensitive files or execute code. Affected releases are all prior to 5.0.3 and 5.1...

Cisco Ultra Services Framework Staging Server Arbitrary Command Execution Vulnerability

A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The vulnerability is due to improper shell invocations. An attacker could exploit this vulnerability b...

Cisco Ultra Services Framework AutoVNF Log File User Credential Information Disclosure Vulnerability

A vulnerability in the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to access administrative credentials for Cisco Elastic Services Controller ESC and Cisco OpenStack deployments in an affected system. The vulnerability exists because the...

Cisco Ultra Services Framework UAS Unauthenticated Access Vulnerability

A vulnerability in the Ultra Automation Service UAS of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device. The vulnerability is due to an insecure default configuration of the Apache ZooKeeper service used by the...

Cisco Ultra Services Framework Remote Security Bypass Vulnerability

Cisco Ultra Services Framework is the United States Cisco Cisco a smart online services payment platform. A security vulnerability exists in the AutoVNF login function in Cisco Ultra Services Framework, which is a program that fails to perform sufficient detection when creating a directory on a...

Cisco Ultra Services Framework Element Manager Insecure Default Password Vulnerability Vulnerability

Cisco Ultra Services Framework is an intelligent online services payment platform from Cisco, Inc.Element Manager is one of the software used to manage server switches. A security vulnerability exists in Cisco Ultra Services Framework Element Manager. A remote attacker could exploit the...

Cisco Ultra Services Framework Element Manager Default Credentials Security Bypass Vulnerability

Cisco Ultra Services Framework is an intelligent online services payment platform from Cisco, Inc.Element Manager is one of the software used to manage server switches. A security vulnerability exists in Cisco Ultra Services Framework Element Manager. A remote attacker could exploit the...

Cisco Ultra Services Framework Element Manager Default Password Vulnerability

Cisco Ultra Services Framework is an intelligent online services payment platform from Cisco, Inc.Element Manager is one of the software used to manage server switches. A security vulnerability exists in the Cisco Ultra Services Framework Element Manager that stems from the use of default static...

CVE-2017-6685

A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the management network to log in as an admin user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76681. Known Affected...