Vulnslist

find the latest Cisco vulnerabilities

Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance Debug Plug-in Privilege Escalation Vulnerability

cisco-sa-20170405-ucs · Medium · Published · Updated

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to execute arbitrary commands. The vulnerability is due to inadequate integrity checks for the debug plug-in. An attacker could exploit this vulnerability by crafting a debug plug-in and loading it using elevated privileges. An exploit could allow the attacker to run malicious code that would allow for the execution of arbitrary commands as root. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address this vulnerability.

CVEsCVE-2017-6598
Cisco Bug IDsCSCvb86725, CSCvb86797
CVSS ScoreBase 6.4
Base 6.4 CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:X
Product Names From Source
Cisco Unified Computing System (Managed), Cisco Firepower Extensible Operating System (FXOS) 2.0.1.68, Cisco Firepower Extensible Operating System (FXOS)

Related Products

Product CVE Evidence
Firepower Extensible Operating System CVE-2017-6598 Cisco OpenVuln
Cisco Unified Computing System (Managed) CVE-2017-6598 Cisco OpenVuln
Cisco Firepower Extensible Operating System (FXOS) CVE-2017-6598 Cisco OpenVuln
Cisco Firepower Extensible Operating System CVE-2017-6598 Cisco OpenVuln
Cisco Firepower 4100 Series CVE-2017-6598 Cisco OpenVuln