CVE-2017-6640

CVE-2017-6640 is a critical vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software, affecting releases prior to 10.2(1) across Windows, Linux, and Virtual Appliance platforms. It stems from a default, static password for a pre-installed administrative account, allowing unauthenticated, remote attackers to gain root- or system-level access to the DCNM server's administrative console. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating high awareness and potential for future exploitation.