Insecure Default Credentials in Cisco Elastic Services Controllers

CVE-2017-6684

What is CVE-2017-6684?

A vulnerability exists in Cisco Elastic Services Controllers that can permit an authenticated remote attacker to gain unauthorized access to the system as the Linux admin user. This vulnerability stems from the use of insecure default credentials, which can be exploited if not changed during the configuration process. Successful exploitation of this vulnerability may lead to unauthorized system control and compromise sensitive information. It is crucial for users to ensure that default credentials are updated to mitigate this security risk.

References