CVE-2017-6708

CVE-2017-6708 is a critical vulnerability in the AutoVNF tool of the Cisco Ultra Services Framework, affecting all releases prior to 5.0.3 and 5.1. This flaw, stemming from a lack of input validation in symbolic link creation, allows an unauthenticated, remote attacker to read sensitive files or execute arbitrary code. With a CVSS score of 9.8 (CRITICAL), it presents a high-impact threat (confidentiality, integrity, availability) with low attack complexity. While there's no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.