CVE-2017-6597

The CVE-2017-6597 issue affects Cisco UCS Manager and Cisco Firepower 4100 NGFW / 9300 Security Appliance. Affected component: local-mgmt CLI command. Root cause: insufficient input validation in the CLI leading to a command injection when an authenticated, local attacker supplies crafted argumen...

CVE-2017-6598

CVE-2017-6598 affects Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance. A vulnerability in the debug plug-in functionality allows an authenticated, local attacker to execute arbitrary commands with elevated privileges. The root cause is inadequate i...

CVE-2017-6600

Cisco UCS Manager CLI vulnerability CVE-2017-6600 affects Cisco UCS Manager CLI and the Cisco Firepower 4100 Series NGFW and Cisco Firepower 9300 Security Appliance. Root cause: insufficient input validation for a vulnerable CLI command, allowing an authenticated local attacker to inject commands...

CVE-2017-6601

The CVE-2017-6601 entry corresponds to a local CLI command-injection vulnerability in Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 appliances. The issue stems from insufficient input validation in the CLI, allowing an authenticated, local attacker to inject comman...

CVE-2017-6602

The CVE-2017-6602 issue affects Cisco UCS Manager CLI, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance. Root cause: insufficient input validation in the CLI that allows a locally authenticated attacker to inject commands. Impact: command injection with read/write acc...

CVE-2017-6602

A vulnerability in the CLI of Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb66189...

CVE-2017-6598

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to execute arbitrary commands, aka Privilege...

CVE-2017-6601

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61384...

PT-2017-16156 · Cisco · Cisco Firepower System

Name of the Vulnerable Software and Affected Versions: Cisco Firepower System Software versions 6.0.0 through 6.2.1 Description: A vulnerability in the detection engine reassembly of Secure Sockets Layer SSL packets could allow an unauthenticated, remote attacker to cause a denial of service DoS...

PT-2017-16157

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions prior to 6.2.0 Description A vulnerability in the detection engine that handles Secure Sockets Layer SSL packets could allow an unauthenticated, remote attacker to cause a denial of service DoS conditio...

PT-2017-1789

Name of the Vulnerable Software and Affected Versions Cisco Firepower Extensible Operating System versions prior to 2.11.38 Cisco Unified Computing System Central versions prior to 2.11.38 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 2.11.38 Cisco Firepower 9300...

PT-2017-1791

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 2.01.82 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 2.01.82 Cisco Firepower 9300 Security Appliance versions prior to 2.01.82 Description A...

PT-2017-1790

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 92.21.101 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 92.21.101 Cisco Firepower 9300 Security Appliance versions prior to 92.21.101 Description A...

PT-2017-1793

Name of the Vulnerable Software and Affected Versions Cisco Firepower Extensible Operating System versions prior to 92.21.105 Cisco Unified Computing System Central versions prior to 2.11.69 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions 2.01.68 through 3.11kA Description The...

PT-2017-1794

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 2.01.115 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 92.21.101 Cisco Firepower 9300 Security Appliance versions prior to 92.11.1658 Description A...

Cisco Firepower Detection Engine SSL Denial of Service Vulnerability

A vulnerability in the detection engine reassembly of Secure Sockets Layer SSL packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the Snort process consumes a high level of CPU resources...

CVE-2017-6601: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61384...

CVE-2017-3887: Improper Handling of Exceptional Conditions

A vulnerability in the detection engine that handles Secure Sockets Layer SSL packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the Snort process unexpectedly restarts. This vulnerability affects Cisco...

CVE-2017-6598: Missing Authorization

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to execute arbitrary commands, aka Privilege...

CVE-2017-6597: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More...