CVE-2017-6680: A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenti...

Security readout for executives and security teams

Cisco Ultra Services Framework has a reported flaw in its AutoVNF logging function. An unauthenticated remote attacker could create arbitrary directories on an affected system. The provided sources identify Cisco Ultra Services Framework release 21.0.0 as affected, but do not provide CVSS scoring or confirmed exploitation evidence. Exposure is likely limited to organizations running Cisco Ultra Services Framework, especially release 21.0.0. The source bundle does not identify other affected versions, deployment prerequisites, or reachable interfaces. Prioritize discovery first. The flaw is unauthenticated and remote, but severity and fix details are incomplete in the supplied evidence. If Cisco USF 21.0.0 is present, treat remediation as platform-owner urgent. Mitigation focus: Identify any Cisco Ultra Services Framework deployments and their exact release versions.; Check Cisco advisory guidance before choosing upgrade, workaround, or configuration actions.; Escalate release 21.0.0 findings to Cisco support or the responsible platform owner..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.