CVE-2017-6679

The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initiated from the customer's appliance to Cisco's SSH Hubs in the Umbrella datacenters. These tunnels were primarily leveraged for remote support and allowed for authorized/authenticated personnel from the Cisco Umbrella team to access the appliance remotely and obtain full control without explicit customer approval. To address this vulnerability, the Umbrella Virtual Appliance version 2.1.0 now requires explicit customer approval before an SSH tunnel from the VA to the Cisco terminating server can be established.

• http://www.securityfocus.com/bid/101567Third Party Advisory, VDB Entry
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-tunnel-gJw5thgEVendor Advisory
• https://support.umbrella.com/hc/en-us/articles/115004154423Third Party Advisory
• https://support.umbrella.com/hc/en-us/articles/115004752143-Virtual-Appliance-Vulnerability-due-to-always-on-SSH-Tunnel-RESOLVED-2017-09-15Third Party Advisory
• https://www.info-sec.ca/advisories/Cisco-Umbrella.htmlThird Party Advisory
• http://www.securityfocus.com/bid/101567Third Party Advisory, VDB Entry
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-tunnel-gJw5thgEVendor Advisory
• https://support.umbrella.com/hc/en-us/articles/115004154423Third Party Advisory
• https://support.umbrella.com/hc/en-us/articles/115004752143-Virtual-Appliance-Vulnerability-due-to-always-on-SSH-Tunnel-RESOLVED-2017-09-15Third Party Advisory
• https://www.info-sec.ca/advisories/Cisco-Umbrella.htmlThird Party Advisory

Published

Dec 1, 2017

Last Modified

Jun 22, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6671A vulnerability in the email message scanning of Cisco Async…
• CVE-2017-6672A vulnerability in certain filtering mechanisms of access co…
• CVE-2017-6673A vulnerability in Cisco Firepower Management Center could a…
• CVE-2017-6674A vulnerability in the feature-license management functional…
• CVE-2017-6675A vulnerability in the web interface of Cisco Industrial Net…
• CVE-2017-6678A vulnerability in the ingress UDP packet processing functio…
• CVE-2017-6680A vulnerability in the AutoVNF logging function of Cisco Ult…
• CVE-2017-6681A vulnerability in the AutoVNF VNFStagingView class of Cisco…
• CVE-2017-6682A vulnerability in the ConfD CLI of Cisco Elastic Services C…
• CVE-2017-6683A vulnerability in the esc_listener.py script of Cisco Elast…
• CVE-2017-6684A vulnerability in Cisco Elastic Services Controllers could …
• CVE-2017-6685A vulnerability in Cisco Ultra Services Framework Staging Se…