CVE-2017-6692: A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote atta...

Security readout for executives and security teams

Cisco Ultra Services Framework Element Manager had an insecure default account issue that could let an authenticated remote attacker obtain root-level access. Root access can mean full control of the management system. The bundle names one affected release but does not provide CVSS, patch details, or evidence of active exploitation. Exposure is likely limited to organizations running Cisco Ultra Services Framework Element Manager, especially release 21.0.v0.65839. Risk increases if management access is reachable from untrusted networks or shared administrative credentials exist. Prioritize investigation if this Cisco management component exists in the environment. Root-level compromise of a management system can create broad operational risk, but urgency depends on deployment, version, and management-plane exposure. Mitigation focus: Review Cisco advisory CSCvd85710 for fixed release or configuration guidance.; Inventory Cisco Ultra Services Framework Element Manager deployments and running versions.; Prioritize any instance on release 21.0.v0.65839 for vendor-guided remediation..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.