CVE-2017-12243 A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticat...
HighCVSS 7.8
EPSS 77.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device, aka Command Injection. The vulnerability is due to improper validation of string input in the shell application. An attacker could exploit this vulnerability through the use of malicious commands. A successful exploit could allow the attacker to obtain root shell privileges on the device. Cisco Bug IDs: CSCvf20741, CSCvf60078.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unified computing system manager firmware | All versions | No fix listed |
| cisco firepower 9300 security appliance firmware | All versions | No fix listed |
| cisco firepower 4100 next-generation firewall firmware | All versions | No fix listed |
References
- 101652 third-party-advisory vdb-entry
- 1039719 third-party-advisory vdb-entry
- tools.cisco.com vendor-advisory