{"id":"CVE-2017-6692","aliases":["EUVD-2017-15746","GHSA-hx3v-wx4j-h472"],"status":"published","title":"A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated,...","description":"A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log in to the device with the privileges of the root user, aka an Insecure Default Account Information Vulnerability. More Information: CSCvd85710. Known Affected Releases: 21.0.v0.65839.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02276,"percentile":0.83217,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1188"],"published":"2017-06-13T06:00:00Z","modified":"2026-06-17T01:22:48Z","products":[{"vendor":"cisco","product":"ultra_services_framework_element_manager"}],"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-usf6","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98980","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-6692"},{"url":"https://github.com/advisories/GHSA-hx3v-wx4j-h472"}],"sources":{"cve":[{"id":"CVE-2017-6692","description":"A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log in to the device with the privileges of the root user, aka an Insecure Default Account Information Vulnerability. More Information: CSCvd85710. Known Affected Releases: 21.0.v0.65839.","status":"published","published":"2017-06-13T06:00:00Z","modified":"2024-08-05T15:41:16.075Z","updated_at":"2026-11-02T14:33:16.916541Z"}],"euvd":[{"id":"EUVD-2017-15746","description":"A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log in to the device with the privileges of the root user, aka an Insecure Default Account Information Vulnerability. More Information: CSCvd85710. Known Affected Releases: 21.0.v0.65839.","status":"published","published":"2017-06-13T06:00:00Z","modified":"2024-08-05T15:41:16Z","updated_at":"2026-11-03T02:39:11.589017Z"}],"ghsa":[{"id":"GHSA-hx3v-wx4j-h472","title":"A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated,...","description":"A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log in to the device with the privileges of the root user, aka an Insecure Default Account Information Vulnerability. More Information: CSCvd85710. Known Affected Releases: 21.0.v0.65839.","status":"published","published":"2022-05-13T01:46:45Z","modified":"2023-02-02T05:01:31Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:51:12.391632Z"}],"nvd":[{"id":"CVE-2017-6692","description":"A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log in to the device with the privileges of the root user, aka an Insecure Default Account Information Vulnerability. More Information: CSCvd85710. Known Affected Releases: 21.0.v0.65839.","status":"published","published":"2017-06-13T06:29:01.597Z","modified":"2026-06-17T01:22:48.61Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:03:50.782497Z"}]}}