CVE-2017-6682: A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote...

Security readout for executives and security teams

Cisco Elastic Services Controller had a reported issue where a logged-in remote user could run operating-system commands through the ConfD CLI as the Linux tomcat user. This is concerning for environments using ESC to manage services, but the provided sources do not include CVSS, fixed versions, or evidence of exploitation in the wild. Exposure is most likely limited to organizations running Cisco Elastic Services Controller with ConfD CLI reachable by authenticated users. The bundle names Cisco ESC release 2.2(9.76), but does not provide a complete affected-version range. Treat this as a high-priority management-plane issue where Cisco ESC is deployed. Prioritize inventory and vendor-guided remediation, especially if multiple administrators, shared credentials, or remote management access exist. Mitigation focus: Check Cisco advisory cisco-sa-20170607-esc1 and CSCvc76620 for fixed releases or official mitigations.; Identify Cisco ESC deployments and compare installed releases with 2.2(9.76).; Restrict ESC ConfD CLI access to trusted administrative networks and approved users..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.