CVE-2017-6693: A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenti...

Security readout for executives and security teams

CVE-2017-6693 affects Cisco Elastic Services Controller. A user who is already authenticated locally on the system could access filesystem information they should not be able to reach through the ConfD server component. This is not described as a remote unauthenticated compromise, but it can matter where ESC hosts store sensitive operational data. Exposure is likely limited to organizations running Cisco Elastic Services Controller, especially releases 2.2(9.76) or 2.3(1), where untrusted or broad local access exists on ESC systems. Treat this as a targeted management-plane exposure issue. It is not sourced as actively exploited, but affected ESC systems should be reviewed because filesystem information access can support follow-on compromise or data exposure. Mitigation focus: Inventory Cisco Elastic Services Controller deployments and versions.; Prioritize review of releases 2.2(9.76) and 2.3(1).; Check Cisco’s advisory for fixed releases or vendor-approved mitigations..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.