Privilege escalation in Cisco Application Policy Infrastructure Controller - CVE-2017-6767

Vulnerability identifier: #VU7976

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-6767

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote authenticated attacker to gain elevated privileges on the target system.

The weakness exists in Cisco Application Policy Infrastructure Controller (APIC) due to a limitation with how Role-Based Access Control (RBAC) grants privileges to remotely authenticated users when login occurs via SSH directly to the local management interface of the APIC. A remote attacker can authenticate to the targeted device, gain elevated privileges and perform CLI commands.

Successful exploitation of the vulnerability results in privilege escalation.

Cisco Application Policy Infrastructure Controller

Update to version 2.2(2e) or 2.3(1f).

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170816-apic1

• Privilege escalation in Cisco Application Policy Infrastructure Controller