Vulnerability in Cisco Application_policy_infrastructure_controller
CVE-2017-6768
A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application Policy Infrastructure Controller (APIC) devices could allow an authenticated, local attacker to gain root-level privileg…
EPSS: 0.001 (24.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Cisco Application_policy_infrastructure_controller — versions 1.1\(0.920a\), 1.1\(1j\), 1.1\(3f\)
- Cisco Systems, Inc. Application Policy Infrastructure Controller (Apic) — versions 1.2 Base, 1.2(2), 1.2(3), 1.2.2, 2.0 Base, 2.0(1), 1.3(1), 1.3(2), 1.3(2f)
Weakness classification (CWE)
References
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-6768?
- CVE-2017-6768 is a high-severity vulnerability in Cisco Application_policy_infrastructure_controller, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2017-08-17.
- How severe is CVE-2017-6768?
- High severity. CVSS v3 base score is 7.8 out of 10.