CVE-2017-6079

CVSS 3.1: 9.8 critical
EPSS: 47%p99
Published: May 16, 2017 · May 16, 2017
Modified: Jun 17, 2026

Analyze CVE-2017-6079 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes, etc., to be set. You can use this page as a web shell essentially to execute commands, though you get no feedback client-side from the web application: if the command is valid, it executes. An example is the wget command. The page that allows this has been confirmed in firmware as old as 2006.

Vendors: ribboncommunications

Products: edgemarc firmware

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (46.8%)

In the news

4 stories

Kaspersky Q4 2021 DDoS attack report

Kaspersky SecurelistFeb 10, 10:00 UTC · Feb 10, 2022RansomwareCVE-2017-6079 CVE-2021-22205 CVE-2021-362602

AT&T said it's investigating and has "taken steps to mitigate" a botnet that infected more than 5,700 VoIP servers located inside its network, a spokesperson has told The Record earlier today.

The RecordJan 20, 00:00 UTC · Jan 20, 2023MalwareCVE-2017-60792 · 1 read

New EwDoor Botnet Targeting Unpatched AT&T Network Edge Devices

The Hacker NewsDec 1, 14:13 UTC · Dec 1, 2021VulnerabilityCVE-2017-60792 · 1 read

New EwDoor Botnet is targeting AT&T customers

Security AffairsNov 30, 19:09 UTC · Nov 30, 2021MalwareCVE-2017-60793