Insecure Default Credentials in Cisco Ultra Services Framework Element Manager

CVE-2017-6686

What is CVE-2017-6686?

A vulnerability exists in Cisco Ultra Services Framework Element Manager, which could allow an authenticated remote attacker with access to the management network to log in as an administrator or operator on the affected device. This issue arises from the presence of insecure default credentials, potentially compromising the security of the management interface. Organizations using this product should take immediate steps to mitigate risks by updating to the latest versions and applying recommended security practices.

References