Cisco AsyncOS for Web Security Appliance CVE-2017-6750 Insecure Default Password Vulnerability
BID:99924
Info
Cisco AsyncOS for Web Security Appliance CVE-2017-6750 Insecure Default Password Vulnerability
| Bugtraq ID: | 99924 |
| Class: | Design Error |
| CVE: |
CVE-2017-6750 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 19 2017 12:00AM |
| Updated: | Jul 19 2017 12:00AM |
| Credit: | Daniel Jensen from Security-Assessment.com. |
| Vulnerable: |
Cisco Web Security Appliance 10.1.0-204 Cisco AsyncOS Software 10.1.0-204 |
| Not Vulnerable: |
Cisco Web Security Appliance 10.5.1-270 Cisco AsyncOS Software 10.5.1-270 |
Discussion
Cisco AsyncOS for Web Security Appliance CVE-2017-6750 Insecure Default Password Vulnerability
Cisco AsyncOS Software for Web Security Appliance is prone to an insecure default-password vulnerability.
Remote attackers with knowledge of the default credentials may exploit this vulnerability to gain unauthorized access and perform unauthorized actions. This may aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCve06124.
Cisco AsyncOS Software for Web Security Appliance is prone to an insecure default-password vulnerability.
Remote attackers with knowledge of the default credentials may exploit this vulnerability to gain unauthorized access and perform unauthorized actions. This may aid in further attacks.
This issue is being tracked by Cisco Bug ID CSCve06124.
Exploit / POC
Cisco AsyncOS for Web Security Appliance CVE-2017-6750 Insecure Default Password Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Cisco AsyncOS for Web Security Appliance CVE-2017-6750 Insecure Default Password Vulnerability
References:
References: