CVE-2017-6735

MEDIUM

Cisco FireSIGHT - RCE

Title source: llm

Description

A vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could allow an authenticated, local attacker to execute arbitrary code on a targeted system. More Information: CSCvc91092. Known Affected Releases: 6.2.0 6.2.1.

References (3)

Scores

CVSS v3 6.7
EPSS 0.0008
EPSS Percentile 24.4%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (3)
cisco/firesight_system_software
cisco/firesight_system_software
n/a/Cisco FireSIGHT System Software < Cisco FireSIGHT System Software
Published Jul 10, 2017
Tracked Since Feb 18, 2026