VDB
CVE-2017-12350
CVE-2017-12350
PUBLISHED
CVSS 7.199999809265137 HIGH
A vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier could allow an authenticated, local attacker to log in to an affected virtual appliance with root privileges. The vulnerability is due to the presence of default, static user credentials for an affected virtual appliance. An attacker could exploit this vulnerability by using the hypervisor console to connect locally to an affected system and then using the static credentials to log in to an affected virtual appliance. A successful exploit could allow the attacker to log in to the affected appliance with root privileges. Cisco Bug IDs: CSCvg31220.
EPSS 0.05% · 15.8th percentile
Risk Scores
CVSS 2.0
7.199999809265137
EPSS Score
0.05%
15.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | umbrella_insights_virtual_appliance | 0 |
| n/a | Cisco Umbrella Insights Virtual Appliance | * |
Exploit Intelligence
- https://www.info-sec.ca/advisories/Cisco-Umbrella-Hardcoded-Credentials.html (circl)
- 101879 (circl)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-uva (circl)
- Cisco Umbrella Virtual Appliance 2.1.0 Hardcoded Credentials Vulnerability (0day-today)
- Cisco Umbrella Virtual Appliance 2.1.0 Hardcoded Credentials Vulnerability (0day-today)
Timeline
- Nov 15, 2017 CVE Published
- Nov 18, 2017 PoC Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 6, 2022 EPSS Score