475 matches found
CVE-2017-12277
A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges. The vulnerability i...
CVE-2017-12243
Summary of CVE-2017-12243: A local authenticated command-injection vulnerability affects Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance. The root cause is improper validation of string input in the shell application, enabling an attacker to execut...
CVE-2017-12277: Improper Input Validation
A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges. The vulnerability i...
Command Injection Vulnerability in Multiple Cisco Products
The Cisco Firepower 4100 Series Next-Generation Firewall NGFW and the Cisco Firepower 9300 Security Appliance are security appliances from Cisco.Smart Licensing Smart Licensing Manager service is one of the license smart management service. A command injection vulnerability exists in the Smart...
CVE-2017-12243: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device, aka Command Injection. The...
Command Injection Vulnerability in Multiple Cisco Products
Cisco Unified Computing System UCS Manager is a set of embedded device management software. Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Cisco Firepower 9300 Security Appliance are firewall devices. Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Cisco Firepower 930...
Cisco Firepower 4100 Series NGFW and Firepower 9300 Security Appliance Smart Licensing Command Injection Vulnerability
A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges. The vulnerability i...
Cisco Releases Security Updates
Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply the...
CVE-2017-12245
CVE-2017-12245 describes a memory-consumption DoS vulnerability in Cisco Firepower Threat Defense (FTD) Software’s SSL traffic decryption. Root cause: an error in how the Firepower Detection Snort Engine handles SSL traffic decryption and communicates with the ASA handler, enabling an unauthentic...
primera.com XSS vulnerability
Vulnerable URL: https://www.primera.com/bravo-4100.html!prettyPhoto/0,/x Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 517850 VIP website status:| No Coordinated Disclosure...
CVE-2014-6189: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM Security Network Protection 3100, 4100, 5100, and 7100 devices with firmware 5.2 before 5.2.0.0-ISS-XGS-All-Models-Hotfix-FP0008 and 5.3 before 5.3.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CLI Command Injection Vulnerability in Multiple Cisco Products
Cisco Unified Computing System UCS Manager provides unified and embedded management of all software and hardware components in Cisco UCS. the Cisco Firepower 4100 Series is a next-generation firewall. the Cisco Firepower 9300 is a scalable carrier-grade platform. A command injection vulnerability...
Command injection
A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More...
CVE-2017-6600
A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61351...
CVE-2017-6602
A vulnerability in the CLI of Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb66189...
CVE-2017-6600
A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61351...
CVE-2017-6601
A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61384...
CVE-2017-6597: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More...
CVE-2017-6602: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the CLI of Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb66189...