CVE-2017-6679

MediumCVSS 6.4/10Last modified Jun 22, 2026

Description

The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initiated from the customer's appliance to Cisco's SSH Hubs in the Umbrella datacenters. These tunnels were primarily leveraged for remote support and allowed for authorized/authenticated personnel from the Cisco Umbrella team to access the appliance remotely and obtain full control without explicit customer approval. To address this vulnerability, the Umbrella Virtual Appliance version 2.1.0 now requires explicit customer approval before an SSH tunnel from the VA to the Cisco terminating server can be established.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Dec 1, 2017
Last modified
Jun 22, 2026
NVD status
Analyzed

Related CVEs from 2017

CVE-2017-66807.5A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create CVE-2017-66817.5A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to exeCVE-2017-66828.8A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to run arbitrary commanCVE-2017-66838.8A vulnerability in the esc_listener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to executeCVE-2017-66848.8A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the LCVE-2017-66858.8A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the managementCVE-2017-66868.8A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the managemenCVE-2017-66878.8A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the managemenCVE-2017-66888.8A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the LCVE-2017-66898.8A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affecteCVE-2017-66904.9A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system cCVE-2017-66916.5A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive inf
CVE-2017-6679: Medium severity, CVSS 6.4 | Vulnix