CVE:CVE-2017-6767
CNNVD:CNNVD-201708-784
Cisco Application Policy Infrastructure Controller（APIC）是美国思科（Cisco）公司的一款自动化管理以应用为中心的基础设施（ACI）的控制器。
Cisco APIC中存在提权漏洞。远程攻击者可通过认证目标设备利用该漏洞获取提升的权限或执行CLI命令。
solution:Upgrade cisco application_policy_infrastructure_controller to a higher version than 1.0(1e,1.0(1h,1.0(1k,1.0(1n,1.0(2j,1.0(2m,1.0(3f,1.0(3i,1.0(3k,1.0(3n,1.0(4h,1.0(4o,1.1(0.920a,1.1(1j,1.1(3f,1.2(2,1.2(3,1.2.2,1.2_base,1.3(1,1.3(2,1.3(2f,2.0(1,2.0_base,and avoid the version 1.0(1e),1.0(1h),1.0(1k),1.0(1n),1.0(2j),1.0(2m),1.0(3f),1.0(3i),1.0(3k),1.0(3n),1.0(4h),1.0(4o),1.1(0.920a),1.1(1j),1.1(3f),1.2(2),1.2(3),1.2.2,1.2_base,1.3(1),1.3(2),1.3(2f),2.0(1),2.0_base