CVE-2017-6714
published 2017-07-06CVE-2017-6714: A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbitrary…
PriorityP268critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
4.20%
89.7th percentile
A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The vulnerability is due to improper shell invocations. An attacker could exploit this vulnerability by crafting CLI command inputs to execute Linux shell commands as the root user. This vulnerability affects all releases of Cisco Ultra Services Framework Staging Server prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvc76673.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ultra_services_framework_staging_server | <= 5.0.2 | — |
| cisco | ultra_services_framework_staging_server | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Exploit vector targets the AutoIT service of Cisco Ultra Services Framework Staging Server via crafted CLI command inputs to achieve OS command injection as root ↗
- →Root cause is improper shell invocations in the AutoIT service (CWE-78); monitor for unexpected shell process spawning from the AutoIT service process ↗
- →Exploitation results in arbitrary shell command execution as the Linux root user; alert on privilege escalation or root-level process creation originating from the AutoIT service ↗
- ·All releases of Cisco Ultra Services Framework Staging Server prior to 5.0.3 and 5.1 are affected; upgrade to 5.0.3 or 5.1 to remediate ↗
- ·No workarounds are available; patching is the only mitigation ↗
- ·Tracked under Cisco Bug ID CSCvc76673 ↗
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_cisco9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Ultra Services Framework Staging Server Arbitrary Command Execution Vulnerability
vendor_cisco·2017-07-05·CVSS 9.8
CVE-2017-6714 [CRITICAL] CWE-78 Cisco Ultra Services Framework Staging Server Arbitrary Command Execution Vulnerability
Cisco Ultra Services Framework Staging Server Arbitrary Command Execution Vulnerability
A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user.
The vulnerability is due to improper shell invocations. An attacker could exploit this vulnerability by crafting CLI command inputs to execute Linux shell commands as the root user. An exploit could allow the attacker to execute arbitrary shell commands as the Linux root user.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/Ci
Cisco
Cisco Ultra Services Framework Staging Server Arbitrary Command Execution Vulnerability
vendor_cisco·CVSS 3.0
CVE-2017-6714 Cisco Ultra Services Framework Staging Server Arbitrary Command Execution Vulnerability
CVE-2017-6714: Cisco Ultra Services Framework Staging Server Arbitrary Command Execution Vulnerability
A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The vulnerability is due to improper shell invocations. An attacker could exploit this vulnerability by crafting CLI command inputs to execute Linux shell commands as the root user. An exploit could allow the attacker to execute arbitrary shell commands as the Linux root user. Cisco has released software updates that address this vulnerability. There are no
CVSS: 3.0
CWE: CWE-78, CWE-78
Bug IDs: CSCvc76673
GHSA
GHSA-pch2-25gv-rxqj: A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbi
ghsa_unreviewed·2022-05-13
CVE-2017-6714 [CRITICAL] CWE-78 GHSA-pch2-25gv-rxqj: A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbi
A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The vulnerability is due to improper shell invocations. An attacker could exploit this vulnerability by crafting CLI command inputs to execute Linux shell commands as the root user. This vulnerability affects all releases of Cisco Ultra Services Framework Staging Server prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvc76673.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-07-06
Published