CVE-2017-6710
A vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an authenticated, remote attacker to elevate…
- Published
- Updated
- Reserved
- Assigned by
- cisco
Description
A vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an authenticated, remote attacker to elevate privileges and run commands in the context of the root user on the server. The vulnerability is due to command settings that allow Cisco VNF Element Manager users to specify arbitrary commands that will run as root on the server. An attacker could use this setting to elevate privileges and run commands in the context of the root user on the server. Cisco Bug IDs: CSCvc76670. Known Affected Releases: prior to 5.0.4 and 5.1.4.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.0 | High8.1 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H |
- EPSS (exploitation in 30 days)
- 1.8% · top 21% of all CVEs (3 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.1.
Weakness
- Arbitrary Command Execution
- CWE-78 (opens in a new tab)All about CWE-78 and its CVEs
Affected products
Cisco Systems, Inc. · Virtual Network Function (VNF) Element Manager
- affected prior to 5.0.4 and 5.1.4
References (2)
- 100362 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 20170816 Cisco Virtual Network Function Element Manager Arbitrary Command Execution Vulnerability (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2017-6710)Record last updated .