CVE-2017-6691: A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote...

Security readout for executives and security teams

CVE-2017-6691 is an information disclosure issue in the ConfD CLI of Cisco Elastic Services Controller. An authenticated remote attacker could access sensitive information from an affected system. The provided sources identify Cisco ESC 2.3(2) as a known affected release, but do not provide CVSS, CWE, or fix details in the bundle. Exposure is most likely where Cisco Elastic Services Controller 2.3(2) is deployed and ConfD CLI access is available to remote authenticated users. The bundle does not confirm whether other ESC versions are affected. Treat this as a targeted administrative-plane exposure issue. Prioritize if ESC manages business-critical network services, if CLI access is broadly reachable, or if account hygiene is weak. No public active exploitation is evidenced in the supplied bundle. Mitigation focus: Check Cisco advisory cisco-sa-20170607-esc6 for fixed releases or vendor workarounds.; Upgrade or apply Cisco-recommended mitigation when confirmed for the deployed ESC version.; Restrict ConfD CLI access to trusted administrative networks and roles..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.