CVE-2017-6708

A vulnerability in the symbolic link (symlink) creation functionality of the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to read sensitive files or execute malicious code on an affected system. The vulnerability is due to the absence of validation checks for the input that is used to create symbolic links. This vulnerability affects all releases of the Cisco Ultra Services Framework prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvc76654.

• CWE-200
• CWE-200

• http://www.securityfocus.com/bid/99512
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf1Vendor Advisory
• http://www.securityfocus.com/bid/99512
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf1Vendor Advisory

Published

Jul 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6702A vulnerability in the web framework of Cisco SocialMiner co…
• CVE-2017-6703A vulnerability in the web application in the Cisco Prime Co…
• CVE-2017-6704A vulnerability in the web application in the Cisco Prime Co…
• CVE-2017-6705A vulnerability in the filesystem of the Cisco Prime Collabo…
• CVE-2017-6706A vulnerability in the logging subsystem of the Cisco Prime …
• CVE-2017-6707A vulnerability in the CLI command-parsing code of the Cisco…
• CVE-2017-6709A vulnerability in the AutoVNF tool for the Cisco Ultra Serv…
• CVE-2017-6710A vulnerability in the Cisco Virtual Network Function (VNF) …
• CVE-2017-6711A vulnerability in the Ultra Automation Service (UAS) of the…
• CVE-2017-6712A vulnerability in certain commands of Cisco Elastic Service…
• CVE-2017-6713A vulnerability in the Play Framework of Cisco Elastic Servi…
• CVE-2017-6714A vulnerability in the AutoIT service of Cisco Ultra Service…