Vulnerability fixed in Cisco Firepower and UCS

Cisco has fixed a vulnerability in Firepower 4100 and 9300 systems and in UCS 6300 systems. The vulnerability is located in SNMP handling and allows a malicious party to cause a denial-of-service exploit. Cisco has released updates to fix the vulnerability in the vulnerable UCS and Firepower...

CVE-2023-20015: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could allow an authenticated, local attacker to inject unauthorized commands. This vulnerability is due to insufficient input...

Denial of Service Vulnerability in FXOS Software and NX-OS Software Fabric Services Component for Multiple Cisco Products

Cisco Firepower 4100 Series Next-Generation Firewalls are all products of Cisco Corporation.Cisco Firepower 4100 Series Next-Generation Firewalls is a 4100 series firewall device. Cisco Firepower 4100 Series Next-Generation Firewalls are 4100 series firewalls.MDS 9000 Series Multilayer Switches a...

Cisco FXOS and NX-OS CFS Arbitrary Code Execution Vulnerability (CNVD-2018-11964)

Cisco Firepower 4100 Series Next-Generation Firewalls are all products of Cisco Corporation.Cisco Firepower 4100 Series Next-Generation Firewalls is a 4100 series firewall device. Cisco Firepower 4100 Series Next-Generation Firewalls are 4100 series firewalls.MDS 9000 Series Multilayer Switches a...

PT-2018-8737

Name of the Vulnerable Software and Affected Versions: Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Firepower 9300 Security Appliance affected versions not specified Description: A vulnerability in the Cisco FXOS application image upload process could allow an authenticated, remo...

CVE-2017-12277

A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges. The vulnerability i...

Command Injection Vulnerability in Multiple Cisco Products

The Cisco Firepower 4100 Series Next-Generation Firewall NGFW and the Cisco Firepower 9300 Security Appliance are security appliances from Cisco.Smart Licensing Smart Licensing Manager service is one of the license smart management service. A command injection vulnerability exists in the Smart...

CVE-2017-12243: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device, aka Command Injection. The...

CVE-2017-12277: Improper Input Validation

A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges. The vulnerability i...

PT-2017-3408

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager affected versions not specified Cisco Firepower 4100 Series Next-Generation Firewall NGFW affected versions not specified Cisco Firepower 9300 Security Appliance affected versions not specified...

Command injection

A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More...

CVE-2017-6600

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61351...

PT-2017-1793

Name of the Vulnerable Software and Affected Versions Cisco Firepower Extensible Operating System versions prior to 92.21.105 Cisco Unified Computing System Central versions prior to 2.11.69 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions 2.01.68 through 3.11kA Description The...

CVE-2017-6602: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb66189...

PT-2017-1794

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 2.01.115 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 92.21.101 Cisco Firepower 9300 Security Appliance versions prior to 92.11.1658 Description A...

CVE-2017-6598: Missing Authorization

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to execute arbitrary commands, aka Privilege...

CVE-2017-6597: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More...

CVE-2017-6601: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61384...

CVE-2017-6600: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61351...

PT-2017-1790

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 92.21.101 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 92.21.101 Cisco Firepower 9300 Security Appliance versions prior to 92.21.101 Description A...