CVE-2017-6674 A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for a...
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1. Known Fixed Releases: 6.2.1 6.2.0.1 6.1.0.2.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco firesight system | = 6.0.1 | No fix listed |
| cisco firesight system | = 6.1.0 | No fix listed |
| cisco firesight system | = 6.2.0 | No fix listed |
| cisco firesight system | = 6.2.1 | No fix listed |
References
- 98654 third-party-advisory vdb-entry
- tools.cisco.com mitigation vendor-advisory