Read the docs
TI-2017-04382 Aliases CVE-2017-6623GHSA-hrrj-w527-vh57

Access control flaw in Cisco Policy Suite

Priority LOW 34CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass, Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-264 and CWE-269.

Summary

A vulnerability in a script file that is installed as part of the Cisco Policy Suite (CPS) Software distribution for the CPS appliance could allow an authenticated, local attacker to escalate their privilege level to root. The vulnerability is due to incorrect sudoers permissions on the script file. An attacker could exploit this vulnerability by authenticating to the device and providing crafted user input at the CLI, using this script file to escalate their privilege level and execute commands as root. A successful exploit could allow the attacker to acquire root-level privileges and take full control of the appliance. The user has to be logged-in to the device with valid credentials for a specific set of users. The Cisco Policy Suite application is vulnerable when running software versions 10.0.0, 10.1.0, or 11.0.0. Cisco Bug IDs: CSCvc07366.

Why it matters now

EPSS 0.0032 25th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco Policy SuiteCisco Policy Suite—No fix listedCNA
  • Cisco Policy Suite Vendor— Affected Cisco Policy Suite Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:cisco:policy_suite:10.0.0:*:*:*:*:*:*:*10.0.0VulnerableCisco
cpe:2.3:a:cisco:policy_suite:10.1.0:*:*:*:*:*:*:*10.1.0VulnerableCisco
cpe:2.3:a:cisco:policy_suite:11.0.0:*:*:*:*:*:*:*11.0.0VulnerableCisco
  • cpe:2.3:a:cisco:policy_suite:10.0.0:*:*:*:*:*:*:* Versions 10.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:policy_suite:10.1.0:*:*:*:*:*:*:* Versions 10.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:policy_suite:11.0.0:*:*:*:*:*:*:* Versions 11.0.0 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-6623
  2. 2026-10-03 Alias added: GHSA-hrrj-w527-vh57

References

Advisory 1

  • TI-2018-00334 Hard-coded credentials in Cisco Policy Suite unknown CVSS 3.0CRITICAL 9.8
  • TI-2021-17314 Cisco Policy Suite Static SSH Keys Vulnerability CVSS 3.1CRITICAL 9.8
  • TI-2018-00336 Missing authentication in Cisco Policy Suite unknown CVSS 3.0CRITICAL 9.8
  • TI-2018-00335 Missing authentication in Cisco Policy Suite unknown CVSS 3.0CRITICAL 9.8
  • TI-2018-00064 Access control flaw in Cisco Policy Suite CVSS 3.0HIGH 7.5
  • TI-2017-04535 Improper authentication in Cisco Policy Suite CVSS 3.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences