CVE-2017-6700: A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Progra...

Security readout for executives and security teams

CVE-2017-6700 is a client-side web management flaw in Cisco Prime Infrastructure and Evolved Programmable Network Manager. A remote unauthenticated attacker could cause malicious script to run in a management user’s browser. Business risk depends on who uses the interface and whether it is reachable beyond trusted administrative networks. Exposure is most relevant where Cisco PI or EPNM web management interfaces are deployed and accessible to users who can be targeted. Internet or broadly reachable management portals raise risk, but the source bundle does not prove public exposure or broad exploitation. Treat this as a targeted management-plane risk, not a broad wormable outage. Prioritize if Cisco PI or EPNM administers important network infrastructure or the web interface is widely reachable. Mitigation focus: Review Cisco advisory cisco-sa-20170621-piepnm4 for vendor fixes and affected-release guidance.; Inventory Cisco PI and EPNM deployments and record exact versions.; Prioritize remediation for known affected releases 3.1(1) and 2.0(4.0.45B)..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.