CVE-2017-6679

mediumPriorität · verfolgen · 26EPSS 0.003 · 27. PerzentilEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.34% (27th) EPSS

CVSS 6 · medium

Is it mine?

4 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisco_csaf

EPSS · bewertet 2026-10-27

The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initiated from the customer's appliance to Cisco's SSH Hubs in the Umbrella datacenters. These tunnels were primarily leveraged for remote support and allowed for authorized/authenticated personnel from the Cisco Umbrella team to access the appliance remotely and obtain full control without explicit customer approval. To address this vulnerability, the Umbrella Virtual Appliance version 2.1.0 now requires explicit customer approval before an SSH tunnel from the VA to the Cisco terminating server can be established.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenCisco Umbrella Insights Virtual Appliancecisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.4

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.06mediumAV:L/AC:H/Au:S/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 1.5 · Auswirkung 10

v3.16.4mediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 0.5 · Auswirkung 5.9

v3.06.4mediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · Cisco PSIRT US

v3.16.4mediumAV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.15.9mediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-254US

betroffene Produkte (4)

Betroffene Produkte und Versionsbereiche.

Cisco Cisco Umbrella Insights Virtual Appliancealle Versionencisco_csafUS
n/a Cisco Umbrella Virtual Appliance Version 2.0.3 and prior≤ Cisco Umbrella Virtual Appliance Version 2.0.3 and priorenisa_euvdEU
Cisco Systems Inc. Cisco Umbrella≤ 2.1.0fstec_bduRU
cisco umbrella virtual appliance< 2.1.0nvdUScpe:2.3:a:cisco:umbrella_virtual_appliance:*:*:*:*:*:*:*:*

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

cisco-sa-umbrella-tunnel-gJw5thgECisco Umbrella Virtual Appliance Undocumented Support Tunnel Vulnerability2023-08-16csaf · cisco_csafUS
A vulnerability in the remote support feature of Cisco Umbrella Virtual Appliance could allow an authenticated, remote attacker to obtain full control of an affected device. This vulnerability is due to an undocumented support mechanism that is present on the product. An attacker could exploit this vulnerability by obtaining privileges sufficient to access the remote support tunnel. A successful exploit could allow the attacker to access the appliance remotely and obtain full control without explicit customer approval. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. Cisco Umbrella originally published this advisory in 2017 on a different site that has since been archived.

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisco_csaf nvd NVD CVE.org MITRE

veröffentlicht 2017-12-01geändert 2026-06-22

Referenzen (15)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan