CVE-2017-6786: A vulnerability in Cisco Elastic Services Controller could allow an authenticated, local, unprivileged atta...

Security readout for executives and security teams

Cisco Elastic Services Controller had sensitive log files that were not properly protected. A local, authenticated, low-privilege user could read those logs and potentially obtain system account credentials. This is mainly an insider, foothold, or compromised-account risk rather than a remote internet attack. Exposure is limited to organizations running Cisco Elastic Services Controller, especially release 2.2(9.76), with local user accounts or compromised local credentials. The provided sources do not identify additional affected versions, appliances, or deployment modes. Prioritize if Cisco ESC is used in environments with multiple local users, shared administration, or elevated trust in stored credentials. The risk is not described as remotely exploitable, but credential exposure on an orchestration component can expand compromise impact. Mitigation focus: Review Cisco advisory cisco-sa-20170816-esc4 for fixed versions and vendor remediation guidance.; Inventory Cisco Elastic Services Controller deployments and flag release 2.2(9.76).; Restrict local shell access to trusted administrators only..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.