CVE-2017-12350

 

Published at: - 16-11-2017 08:29

Last modified: - 21-11-2022 03:21

Total changes: - 2

Description

A vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier could allow an authenticated, local attacker to log in to an affected virtual appliance with root privileges. The vulnerability is due to the presence of default, static user credentials for an affected virtual appliance. An attacker could exploit this vulnerability by using the hypervisor console to connect locally to an affected system and then using the static credentials to log in to an affected virtual appliance. A successful exploit could allow the attacker to log in to the affected appliance with root privileges. Cisco Bug IDs: CSCvg31220.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://www.info-sec.ca/advisories/Cisco-Umbrella-Hardcoded-Credentials.html
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-uva
• 101879-Third Party Advisory, VDB Entry

 

Keywords

NVD

 

CVE-2017-12350

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures