CVE-2017-6714

A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The vulnerability is due to improper shell invocations. An attacker could exploit this vulnerability by crafting CLI command inputs to execute Linux shell commands as the root user. This vulnerability affects all releases of Cisco Ultra Services Framework Staging Server prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvc76673.

• CWE-78
• CWE-78

• http://www.securityfocus.com/bid/99436Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf3Vendor Advisory
• http://www.securityfocus.com/bid/99436Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf3Vendor Advisory

Published

Jul 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6708A vulnerability in the symbolic link (symlink) creation func…
• CVE-2017-6709A vulnerability in the AutoVNF tool for the Cisco Ultra Serv…
• CVE-2017-6710A vulnerability in the Cisco Virtual Network Function (VNF) …
• CVE-2017-6711A vulnerability in the Ultra Automation Service (UAS) of the…
• CVE-2017-6712A vulnerability in certain commands of Cisco Elastic Service…
• CVE-2017-6713A vulnerability in the Play Framework of Cisco Elastic Servi…
• CVE-2017-6715A vulnerability in the web framework of Cisco Firepower Mana…
• CVE-2017-6716A vulnerability in the web framework code of Cisco Firepower…
• CVE-2017-6717A vulnerability in the web framework of Cisco Firepower Mana…
• CVE-2017-6718A vulnerability in the CLI of Cisco IOS XR Software could al…
• CVE-2017-6719A vulnerability in the CLI of Cisco IOS XR Software could al…
• CVE-2017-6720A vulnerability in the Secure Shell (SSH) subsystem of Cisco…6.5