CVE-2017-3806

N/A

Description

A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to inject arbitrary shell commands that are executed by the device. More Information: CSCvb61343. Known Affected Releases: 2.0(1.68). Known Fixed Releases: 2.0(1.118) 2.1(1.47) 92.1(1.1646) 92.1(1.1763) 92.2(1.101).

CVE Details

CVSS v3.1 ScoreN/A

Published2/3/2017

Last Modified4/20/2025

Sourcenvd

Honeypot Sightings0

Affected Products

cisco:firepower_threat_defense

Weaknesses (CWE)

CWE-78

References

http://www.securityfocus.com/bid/95943(psirt@cisco.com)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw(psirt@cisco.com)

http://www.securityfocus.com/bid/95943(af854a3a-2127-422b-91ae-364da2661108)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.