Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2017-6622 | First vendor Publication | 2017-05-18 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | |||
|---|---|---|---|
| Overall CVSS Score | 9.8 | ||
| Base Score | 9.8 | Environmental Score | 9.8 |
| impact SubScore | 5.9 | Temporal Score | 9.8 |
| Exploitabality Sub Score | 3.9 | ||
| Attack Vector | Network | Attack Complexity | Low |
| Privileges Required | None | User Interaction | None |
| Scope | Unchanged | Confidentiality Impact | High |
| Integrity Impact | High | Availability Impact | High |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 10 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authentication and perform command injection with root privileges. The vulnerability is due to missing security constraints in certain HTTP request methods, which could allow access to files via the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the targeted application. This vulnerability affects Cisco Prime Collaboration Provisioning Software Releases prior to 12.1. Cisco Bug IDs: CSCvc98724. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6622 |
CPE : Common Platform Enumeration
SAINT Exploits
| Description | Link |
|---|---|
| Cisco Prime Collaboration Provisioning ScriptMgr HEAD request vulnerability | More info here |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2017-05-17 | Cisco Prime Collaboration ScriptMgr authentication bypass attempt RuleID : 42923 - Revision : 2 - Type : SERVER-WEBAPP |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2017-07-13 | Name : The remote network management server is affected by a remote command executio... File : cisco_prime_cp_cve-2017-6622.nasl - Type : ACT_ATTACK |
| 2017-05-22 | Name : The remote network management server is affected by multiple vulnerabilities. File : cisco_prime_cp_sa-20170517-pcp1.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 13:08:29 |
|
| 2021-05-04 13:04:10 |
|
| 2021-04-22 02:17:43 |
|
| 2020-05-23 01:03:18 |
|
| 2019-10-03 09:20:30 |
|
| 2017-10-31 17:23:33 |
|
| 2017-09-30 09:23:39 |
|
| 2017-07-14 13:24:51 |
|
| 2017-07-08 09:24:09 |
|
| 2017-05-25 21:23:38 |
|
| 2017-05-25 09:22:30 |
|
| 2017-05-23 13:23:43 |
|
| 2017-05-19 00:22:31 |
|
