CVE-2017-6602
MEDIUMCisco Firepower Extensible Operating System - OS Command Injection
Title source: ruleDescription
A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb66189 CSCvb86775. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1742) 92.1(1.1658) 2.1(1.38) 2.0(1.107) 2.0(1.87) 1.1(4.148) 1.1(4.138).
Scores
CVSS v3
4.4
EPSS
0.0026
EPSS Percentile
49.3%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Classification
CWE
CWE-78
Status
published
Affected Products (3)
cisco/firepower_extensible_operating_system
cisco/unified_computing_system
n/a/Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance
< Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance
Timeline
Published
Apr 07, 2017
Tracked Since
Feb 18, 2026