CVE-2017-6684: A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log...

Security readout for executives and security teams

CVE-2017-6684 is an insecure default credentials issue in Cisco Elastic Services Controller. An authenticated remote attacker could log in to an affected system as the Linux admin user. The provided sources name Cisco ESC release 21.0.0 as affected, but do not provide CVSS scoring or confirmed patch details. Exposure is likely limited to organizations running Cisco Elastic Services Controller, especially release 21.0.0. Risk depends on whether ESC management interfaces are reachable by authenticated users and whether default credentials remain valid. Treat this as high priority where Cisco ESC is deployed, because successful use could grant Linux admin access. Urgency is lower for environments without ESC or without affected release 21.0.0 exposure. Mitigation focus: Review Cisco advisory cisco-sa-20170607-esc3 for vendor-confirmed fixes or workarounds.; Inventory Cisco Elastic Services Controller deployments and identify release 21.0.0.; Confirm Linux admin and appliance default credentials are changed or disabled..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.