CVE-2017-12350

A vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier could allow an authenticated, local attacker to log in to an affected virtual appliance with root privileges. The vulnerability is due to the presence of default, static user credentials for an affected virtual appliance. An attacker could exploit this vulnerability by using the hypervisor console to connect locally to an affected system and then using the static credentials to log in to an affected virtual appliance. A successful exploit could allow the attacker to log in to the affected appliance with root privileges. Cisco Bug IDs: CSCvg31220.

• CWE-798
• CWE-798

• http://www.securityfocus.com/bid/101879Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-uvaVendor Advisory
• https://www.info-sec.ca/advisories/Cisco-Umbrella-Hardcoded-Credentials.htmlThird Party Advisory
• http://www.securityfocus.com/bid/101879Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-uvaVendor Advisory
• https://www.info-sec.ca/advisories/Cisco-Umbrella-Hardcoded-Credentials.htmlThird Party Advisory

Published

Nov 16, 2017

Last Modified

Jun 22, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12345Multiple vulnerabilities in Cisco Data Center Network Manage…
• CVE-2017-12346Multiple vulnerabilities in Cisco Data Center Network Manage…
• CVE-2017-12347Multiple vulnerabilities in Cisco Data Center Network Manage…
• CVE-2017-12348Multiple vulnerabilities in the web-based management interfa…
• CVE-2017-12349Multiple vulnerabilities in the web-based management interfa…
• CVE-2017-1235IBM WebSphere MQ 8.0 could allow an authenticated user to ca…
• CVE-2017-12351A vulnerability in the guest shell feature of Cisco NX-OS Sy…
• CVE-2017-12352A vulnerability in certain system script files that are inst…
• CVE-2017-12353A vulnerability in the Multipurpose Internet Mail Extensions…
• CVE-2017-12354A vulnerability in the web-based interface of Cisco Secure A…
• CVE-2017-12355A vulnerability in the Local Packet Transport Services (LPTS…
• CVE-2017-12356A vulnerability in the web-based management interface of Cis…