CVE-2017-3806: OS Command Injection

Published Feb 3, 2017

Updated

A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to inject arbitrary shell commands that are executed by the device. More Information: CSCvb61343. Known Affected Releases: 2.0(1.68). Known Fixed Releases: 2.0(1.118) 2.1(1.47) 92.1(1.1646) 92.1(1.1763) 92.2(1.101).

Affected Software

5 affected components

Cisco Firepower Threat Defense=5.3.0

Cisco Firepower Threat Defense=5.4.0

Cisco Firepower Threat Defense=6.0.0

Cisco Firepower Threat Defense=6.0.1

Cisco Firepower Threat Defense=6.1.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Cisco Firepower 4100 Series Next-Generation Firewall / Cisco Firepower 9300 Security Appliance to a version that resolves this vulnerability.
Fixed in 2.0(1.118)
Upgrade
Upgrade Cisco Firepower 4100 Series Next-Generation Firewall / Cisco Firepower 9300 Security Appliance to a version that resolves this vulnerability.
Fixed in 2.1(1.47)
Upgrade
Upgrade Cisco Firepower 4100 Series Next-Generation Firewall / Cisco Firepower 9300 Security Appliance to a version that resolves this vulnerability.
Fixed in 92.1(1.1646)
Upgrade
Upgrade Cisco Firepower 4100 Series Next-Generation Firewall / Cisco Firepower 9300 Security Appliance to a version that resolves this vulnerability.
Fixed in 92.1(1.1763)
Upgrade
Upgrade Cisco Firepower 4100 Series Next-Generation Firewall / Cisco Firepower 9300 Security Appliance to a version that resolves this vulnerability.
Fixed in 92.2(1.101)
Compensating control
Apply the Cisco fix corresponding to advisory CSCvb61343 for authenticated local CLI command processing that could allow arbitrary shell command injection.

Event History

Feb 3, 2017

CVE Published

via MITRE·07:24 AM

Data Sourced

via MITRE·07:24 AM

DescriptionWeakness

Data Sourced

via NVD·07:59 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-3806?

CVE-2017-3806 has a high severity rating due to its impact on command injection by authenticated attackers.

How do I fix CVE-2017-3806?

To fix CVE-2017-3806, upgrade the Cisco Firepower Threat Defense software to the latest recommended version.

Who is affected by CVE-2017-3806?

CVE-2017-3806 affects Cisco Firepower 4100 Series and 9300 Security Appliance running specific versions of the Firepower Threat Defense software.

What type of vulnerability is CVE-2017-3806?

CVE-2017-3806 is a command injection vulnerability that allows attackers to execute arbitrary shell commands.

Is CVE-2017-3806 remote or local?

CVE-2017-3806 is a local vulnerability requiring authentication for exploitation.