CVE-2017-6771
High
Description
A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to acquire sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by browsing to a specific URL of an affected device. An exploit could allow the attacker to view sensitive configuration information about the deployment. Cisco Bug IDs: CSCvd29358. Known Affected Releases: 21.0.v0.65839.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Cisco Ultra Services Framework
PublishedAug 17, 2017
First seenAug 17, 2017
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ultra_services_framework | 21.0.v0.65839 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.