CVE-2017-6600

Cisco UCS Manager CLI vulnerability CVE-2017-6600 affects Cisco UCS Manager CLI and the Cisco Firepower 4100 Series NGFW and Cisco Firepower 9300 Security Appliance. Root cause: insufficient input validation for a vulnerable CLI command, allowing an authenticated local attacker to inject commands...

CVE-2017-6602

The CVE-2017-6602 issue affects Cisco UCS Manager CLI, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance. Root cause: insufficient input validation in the CLI that allows a locally authenticated attacker to inject commands. Impact: command injection with read/write acc...

CVE-2017-3887

A vulnerability in the detection engine that handles Secure Sockets Layer SSL packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the Snort process unexpectedly restarts. This vulnerability affects Cisco...

CVE-2017-3885

A vulnerability in the detection engine reassembly of Secure Sockets Layer SSL packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the Snort process consumes a high level of CPU resources. Affected Products...

CVE-2017-6601

The CVE-2017-6601 entry corresponds to a local CLI command-injection vulnerability in Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 appliances. The issue stems from insufficient input validation in the CLI, allowing an authenticated, local attacker to inject comman...

CVE-2017-6598

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to execute arbitrary commands, aka Privilege...

CVE-2017-3885

CVE-2017-3885 is a vulnerability in the Cisco Firepower System Software detection engine reassembly of SSL packets that can be exploited by an unauthenticated, remote attacker to cause a DoS by driving the Snort process to high CPU usage. Affected releases include Cisco Firepower System Software ...

CVE-2017-6602

A vulnerability in the CLI of Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb66189...

PT-2017-16156 · Cisco · Cisco Firepower System

Name of the Vulnerable Software and Affected Versions: Cisco Firepower System Software versions 6.0.0 through 6.2.1 Description: A vulnerability in the detection engine reassembly of Secure Sockets Layer SSL packets could allow an unauthenticated, remote attacker to cause a denial of service DoS...

PT-2017-1791

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 2.01.82 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 2.01.82 Cisco Firepower 9300 Security Appliance versions prior to 2.01.82 Description A...

PT-2017-1789

Name of the Vulnerable Software and Affected Versions Cisco Firepower Extensible Operating System versions prior to 2.11.38 Cisco Unified Computing System Central versions prior to 2.11.38 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 2.11.38 Cisco Firepower 9300...

PT-2017-1790

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 92.21.101 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 92.21.101 Cisco Firepower 9300 Security Appliance versions prior to 92.21.101 Description A...

PT-2017-1794

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 2.01.115 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 92.21.101 Cisco Firepower 9300 Security Appliance versions prior to 92.11.1658 Description A...

PT-2017-16157

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions prior to 6.2.0 Description A vulnerability in the detection engine that handles Secure Sockets Layer SSL packets could allow an unauthenticated, remote attacker to cause a denial of service DoS conditio...

CVE-2017-6598: Missing Authorization

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to execute arbitrary commands, aka Privilege...

CVE-2017-3885: Uncontrolled Resource Consumption

A vulnerability in the detection engine reassembly of Secure Sockets Layer SSL packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the Snort process consumes a high level of CPU resources. Affected Products...

CVE-2017-3887: Improper Handling of Exceptional Conditions

A vulnerability in the detection engine that handles Secure Sockets Layer SSL packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition because the Snort process unexpectedly restarts. This vulnerability affects Cisco...

CVE-2017-6597: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More...

CVE-2017-6602: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb66189...

CVE-2017-6601: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61384...