CVE-2017-6709

CVE-2017-6709 is a critical vulnerability in Cisco Ultra Services Framework (all releases prior to 5.0.3 and 5.1) where the AutoVNF tool logs administrative credentials in clear text. An unauthenticated, remote attacker can access these credentials by directly accessing the AutoVNF URL where the log files are stored. With a CVSS score of 9.8 (CRITICAL), this vulnerability allows for complete compromise of confidentiality, integrity, and availability (C:H/I:H/A:H) due to network-based, low-complexity attacks with no user interaction required. While there is no evidence of active exploitation (KEV: No) and no public exploit code (Metasploit, Nuclei, ExploitDB: None), the vulnerability has garnered significant community attention with 11 mentions and 1 media article.