How severe is CVE-2017-6079?

CVE-2017-6079 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2017-6079 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 47% (99th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2017-6079?

CVE-2017-6079 affects Ribboncommunications Edgemarc Firmware. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2017-6079?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2017-6079 published?

CVE-2017-6079 was published on 2017-05-16 and last updated on 2026-06-17.

CVE-2017-6079

CVE-2017-6079 is a critical-severity vulnerability in Ribboncommunications Edgemarc Firmware with a CVSS 3.x base score of 9.8. Its EPSS exploit-prediction score of 47% places it in the 99th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: Critical (CVSS 3.x base score 9.8)
CVSS v2: 10.0
EPSS exploit prediction: 47% (99th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Ribboncommunications Edgemarc Firmware
Published: 2017-05-16
Last modified: 2026-06-17

Description

The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes, etc., to be set. You can use this page as a web shell essentially to execute commands, though you get no feedback client-side from the web application: if the command is valid, it executes. An example is the wget command. The page that allows this has been confirmed in firmware as old as 2006.

Frequently asked questions

What is CVE-2017-6079?: The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes, etc., to be set. You can use this page as a web shell essentially to execute commands, though you get no feedback client-side from the web application: if the command is valid, it executes. An example is the wget command. The page that allows this has been confirmed in firmware as old as 2006.
How severe is CVE-2017-6079?: CVE-2017-6079 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2017-6079 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 47% (99th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2017-6079?: CVE-2017-6079 affects Ribboncommunications Edgemarc Firmware. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2017-6079?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2017-6079 published?: CVE-2017-6079 was published on 2017-05-16 and last updated on 2026-06-17.

References

https://depthsecurity.com/blog/cve-2017-6079-blind-command-injection-in-edgewater-edgemarc-devices

Affected products (1)

cpe:2.3:o:ribboncommunications:edgemarc_firmware:-:*:*:*:*:*:*:*