CVE-2017-6646

A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Order information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding to HTTP requests that are sent to the web interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web interface of the software on an affected system. A successful exploit could allow the attacker to access sensitive information about the software. The attacker could use this information to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvc52866 CSCvc52868.

• CWE-200
• CWE-200

• http://www.securityfocus.com/bid/98529Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem6Vendor Advisory
• http://www.securityfocus.com/bid/98529Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-rem6Vendor Advisory

Published

May 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6640A vulnerability in Cisco Prime Data Center Network Manager (…
• CVE-2017-6641A vulnerability in the TCP connection handling functionality…
• CVE-2017-6642A vulnerability in the web interface of Cisco Remote Expert …
• CVE-2017-6643A vulnerability in the web interface of Cisco Remote Expert …
• CVE-2017-6644A vulnerability in the web interface of Cisco Remote Expert …
• CVE-2017-6645A vulnerability in the web interface of Cisco Remote Expert …
• CVE-2017-6647A vulnerability in the web interface of Cisco Remote Expert …
• CVE-2017-6648A vulnerability in the Session Initiation Protocol (SIP) of …
• CVE-2017-6649A vulnerability in the CLI of Cisco NX-OS System Software 7.…
• CVE-2017-6650A vulnerability in the Telnet CLI command of Cisco NX-OS Sys…
• CVE-2017-6651A vulnerability in Cisco WebEx Meetings Server could allow u…
• CVE-2017-6652A vulnerability in the web framework of the Cisco TelePresen…