Remote Command Execution Flaw in Cisco Ultra Services Framework Staging Server

CVE-2017-6714

Summary

A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server allows an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. This flaw stems from improper handling of shell invocations, which can be exploited by crafting specific CLI command inputs. The impact is significant, as it enables an attacker to gain root access to the underlying system. This vulnerability affects all releases of the product prior to version 5.0.3 and 5.1, posing a serious risk to users who have not applied the necessary updates.

References