CVE-2017-6681: Cisco Ultra Services Framework

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to execute a relative path traversal attack, enabling an attacker to read sensitive files on the system. More Information: CSCvc76662. Known Affected Releases: 21.0.0.

Affected products

• Cisco Ultra Services Framework: version 21.0.0 only

Published 2017-06-13. Last modified 2026-06-17.