Vulnerability Description
The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initiated from the customer's appliance to Cisco's SSH Hubs in the Umbrella datacenters. These tunnels were primarily leveraged for remote support and allowed for authorized/authenticated personnel from the Cisco Umbrella team to access the appliance remotely and obtain full control without explicit customer approval. To address this vulnerability, the Umbrella Virtual Appliance version 2.1.0 now requires explicit customer approval before an SSH tunnel from the VA to the Cisco terminating server can be established.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Umbrella | <= 2.0.3 |
References
- http://www.securityfocus.com/bid/101567Third Party AdvisoryVDB Entry
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ci
- https://support.umbrella.com/hc/en-us/articles/115004154423Third Party Advisory
- https://support.umbrella.com/hc/en-us/articles/115004752143-Virtual-Appliance-VuThird Party Advisory
- https://www.info-sec.ca/advisories/Cisco-Umbrella.htmlThird Party Advisory
- http://www.securityfocus.com/bid/101567Third Party AdvisoryVDB Entry
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ci
- https://support.umbrella.com/hc/en-us/articles/115004154423Third Party Advisory
- https://support.umbrella.com/hc/en-us/articles/115004752143-Virtual-Appliance-VuThird Party Advisory
- https://www.info-sec.ca/advisories/Cisco-Umbrella.htmlThird Party Advisory
FAQ
What is CVE-2017-6679?
CVE-2017-6679 is a vulnerability with a CVSS score of 6.4 (MEDIUM). The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initiated from the customer's appliance to Cisco's SSH Hubs in t...
How severe is CVE-2017-6679?
CVE-2017-6679 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-6679?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Umbrella.