CVE-2017-6689: A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote...

Security readout for executives and security teams

CVE-2017-6689 affects Cisco Elastic Services Controller. An authenticated remote attacker could access an affected system as the admin user through the ConfD CLI because of insecure default administrator credentials. This is an administrative-access issue, but the bundle does not provide CVSS, a confirmed patch, or active exploitation evidence. Exposure is limited to organizations running Cisco Elastic Services Controller, especially release 2.2(9.76), with ConfD CLI reachable to authenticated users or remote administrative access paths. Treat as high priority if Cisco ESC is present, because successful abuse can grant admin access. If the product is absent, no direct exposure is indicated by the supplied sources. Mitigation focus: Identify Cisco Elastic Services Controller deployments and versions.; Check Cisco advisory guidance for fixed releases or workarounds.; Remove or rotate default administrator credentials where applicable..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.