CVE-2017-3809: Input Validation

Published Feb 3, 2017

Updated

A vulnerability in the Policy deployment module of the Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to prevent deployment of a complete and accurate rule base. More Information: CSCvb95281. Known Affected Releases: 6.1.0 6.2.0. Known Fixed Releases: 6.1.0.1 6.2.0.

Affected Software

4 affected components

Cisco FirePOWER Management Center=6.1.0

Cisco FirePOWER Management Center=6.2.0

Cisco Secure Firewall Management Center=6.1.0

Cisco Secure Firewall Management Center=6.2.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Cisco Firepower Management Center (FMC) - Policy deployment module to a version that resolves this vulnerability.
Fixed in 6.1.0.1Patch CSCvb95281
Upgrade
Upgrade Cisco Firepower Management Center (FMC) - Policy deployment module to a version that resolves this vulnerability.
Fixed in 6.2.0Patch CSCvb95281

Event History

Feb 3, 2017

CVE Published

via MITRE·07:24 AM

Data Sourced

via MITRE·07:24 AM

DescriptionWeakness

Data Sourced

via NVD·07:59 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-3809?

CVE-2017-3809 is classified as a high severity vulnerability.

How do I fix CVE-2017-3809?

To remediate CVE-2017-3809, it is recommended to upgrade to a fixed release of the Cisco software.

Which versions are affected by CVE-2017-3809?

CVE-2017-3809 affects Cisco Secure Firewall Management Center versions 6.1.0 and 6.2.0.

Can CVE-2017-3809 be exploited remotely?

Yes, CVE-2017-3809 can be exploited by an unauthenticated, remote attacker.

What is the impact of CVE-2017-3809?

CVE-2017-3809 allows an attacker to prevent the deployment of a complete and accurate rule base.