Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:elastic_services_controller:2.3\(2\):*:*:*:*:*:*:*

part: a version: 2.3(2) update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductElastic Services Controller (22829935-553f-5225-846c-eb41057bea55)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-6777 vulnerable 2026-06-08 05:09:54.894794 Details available
A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to acquire sensitive system information. The vulnerability is due to insufficient protection of sensitive files on the system. An attacker could exploit this vulnerability by logging into the ConfD server and executing certain commands. An exploit could allow an unprivileged user to view configuration parameters that can be maliciously used. Cisco Bug IDs: CSCvd76409. Known Affected Releases: 2.3, 2.3(2).
Published: 2017-08-17T20:00:00.000Z
Updated: 2024-09-16T20:22:56.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6772 vulnerable 2026-06-08 05:09:54.890003 Details available
A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to view sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by authenticating to the application and navigating to certain configuration files. An exploit could allow the attacker to view sensitive system configuration files. Cisco Bug IDs: CSCvd29408. Known Affected Releases: 2.3(2).
Published: 2017-08-17T20:00:00.000Z
Updated: 2024-09-16T21:57:05.977Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6696 vulnerable 2026-06-08 05:09:52.162805 Details available
A vulnerability in the file system of Cisco Elastic Services Controllers could allow an authenticated, local attacker to gain access to sensitive user credentials that are stored in an affected system. More Information: CSCvd73677. Known Affected Releases: 2.3(2).
Published: 2017-06-13T06:00:00.000Z
Updated: 2024-08-05T15:41:15.978Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6691 vulnerable 2026-06-08 05:09:52.157551 Details available
A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive information on an affected system. More Information: CSCvd29403. Known Affected Releases: 2.3(2).
Published: 2017-06-13T06:00:00.000Z
Updated: 2024-08-05T15:41:15.996Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.