CVE-2017-6759

A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticated, remote attacker to write arbitrary files as root on the system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by triggering the upgrade package installation functionality. Cisco Bug IDs: CSCvc90304.

• CWE-20
• CWE-20

• http://www.securitytracker.com/id/1039062Third Party Advisory, VDB Entry
• https://quickview.cloudapps.cisco.com/quickview/bug/CSCvc90304Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-pcptVendor Advisory
• http://www.securitytracker.com/id/1039062Third Party Advisory, VDB Entry
• https://quickview.cloudapps.cisco.com/quickview/bug/CSCvc90304Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-pcptVendor Advisory

Published

Aug 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6753A vulnerability in Cisco WebEx browser extensions for Google…
• CVE-2017-6754A vulnerability in the web-based management interface of the…
• CVE-2017-6755A vulnerability in the web portal of the Cisco Prime Collabo…
• CVE-2017-6756A vulnerability in the Web UI Application of the Cisco Prime…
• CVE-2017-6757A vulnerability in Cisco Unified Communications Manager 10.5…
• CVE-2017-6758A vulnerability in the web framework of Cisco Unified Commun…
• CVE-2017-6761A vulnerability in the web-based management interface of Cis…
• CVE-2017-6762A vulnerability in the web-based management interface of Cis…
• CVE-2017-6763A vulnerability in the implementation of the H.264 protocol …
• CVE-2017-6764A vulnerability in the web-based management interface of Cis…
• CVE-2017-6765A vulnerability in the web-based management interface of Cis…
• CVE-2017-6766A vulnerability in the Secure Sockets Layer (SSL) Decryption…