CVE-2017-6748

MEDIUM

Cisco Web Security Appliance - Authenticated Command Injection via CLI Parser

Title source: llm
STIX 2.1

Description

A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88855. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-234.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1038956
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/99918

Scores

CVSS v3 6.7
EPSS 0.0082
EPSS Percentile 52.5%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-74
Status published
Products (20)
cisco/web_security_appliance 10.0.0-232
cisco/web_security_appliance 10.0.0-233
cisco/web_security_appliance 10.0_base
cisco/web_security_appliance 10.1.0
cisco/web_security_appliance 10.1.0-204
cisco/web_security_appliance 10.1.1-230
cisco/web_security_appliance 10.5.0
cisco/web_security_appliance 10.5.0-358
cisco/web_security_appliance 11.0.0
cisco/web_security_appliance 11.0.0-613
... and 10 more
Published Jul 25, 2017
Tracked Since Feb 18, 2026