Vulnslist

find the latest Cisco vulnerabilities

Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance Command Injection Vulnerability

cisco-sa-20171101-arce · Medium · Published · Updated

A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device. The vulnerability is due to improper validation of string input in the shell application. An attacker could exploit this vulnerability through the use of malicious commands. A successful exploit could allow the attacker to obtain root shell privileges on the device. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-arce

Cisco advisory · CSAF JSON

Workarounds

There are no workarounds that address this vulnerability.

CVEsCVE-2017-12243
Cisco Bug IDsCSCvf20741, CSCvf60078
CVSS ScoreBase 6.7
Base 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:X
Product Names From Source
Cisco Unified Computing System (Managed), Cisco Firepower Extensible Operating System (FXOS)

Related Products

Product CVE Evidence
Firepower Extensible Operating System CVE-2017-12243 Cisco OpenVuln
Cisco Unified Computing System (Managed) CVE-2017-12243 Cisco OpenVuln
Cisco Firepower Extensible Operating System (FXOS) CVE-2017-12243 Cisco OpenVuln
Cisco Firepower Extensible Operating System CVE-2017-12243 Cisco OpenVuln
Cisco Firepower 4100 Series CVE-2017-12243 Cisco OpenVuln