CVE-2017-6767

CVE-2017-6767 describes a privilege escalation vulnerability in Cisco Application Policy Infrastructure Controller (APIC) that affects multiple versions. An authenticated remote attacker can gain higher privileges than assigned by authenticating via SSH to the local management interface. The attacker's privileges will match those of the last user to log in, potentially allowing them to execute restricted CLI commands. This vulnerability has a CVSSv3 score of 7.1 (HIGH), indicating a network attack vector with high impact on confidentiality, integrity, and availability, though it requires low privileges and high attack complexity. The attacker cannot achieve root-level access. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) or significant community discussion has been identified for this CVE. It is not listed in CISA's Known Exploited Vulnerabilities catalog.