CVE-2017-12350

HighCVSS 8.2/10Last modified Jun 22, 2026

Description

A vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier could allow an authenticated, local attacker to log in to an affected virtual appliance with root privileges. The vulnerability is due to the presence of default, static user credentials for an affected virtual appliance. An attacker could exploit this vulnerability by using the hypervisor console to connect locally to an affected system and then using the static credentials to log in to an affected virtual appliance. A successful exploit could allow the attacker to log in to the affected appliance with root privileges. Cisco Bug IDs: CSCvg31220.

Metrics

CVSS 3.0 8.2/10CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

Vendor	Product	Versions
n/a	Cisco Umbrella Insights Virtual Appliance	Cisco Umbrella Insights Virtual Appliance

References

http://www.securityfocus.com/bid/101879Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-uvaVendor Advisory
https://www.info-sec.ca/advisories/Cisco-Umbrella-Hardcoded-Credentials.htmlThird Party Advisory
http://www.securityfocus.com/bid/101879Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-uvaVendor Advisory
https://www.info-sec.ca/advisories/Cisco-Umbrella-Hardcoded-Credentials.htmlThird Party Advisory

Timeline

Published: Nov 16, 2017
Last modified: Jun 22, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-123515.7A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker to read and send pack CVE-2017-123526.7A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could CVE-2017-123535.8A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (E CVE-2017-123545.3A vulnerability in the web-based interface of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to vi CVE-2017-123555.3A vulnerability in the Local Packet Transport Services (LPTS) ingress frame-processing functionality of Cisco IOS XR Software could allow an CVE-2017-123566.1A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, rem CVE-2017-123575.4A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker CVE-2017-123585.4A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an authenticated, remot CVE-2017-123596.5A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an attacker t CVE-2017-12366.5IBM WebSphere MQ 9.0.2 could allow an authenticated user to potentially cause a denial of service by saving an incorrect channel status inqu CVE-2017-123604.3A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format (WRF) files could allow an attacker to cause a denial of CVE-2017-123614.0A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Ja