CVE-2017-6600: OS Command Injection

Published Apr 7, 2017

Updated

A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61351 CSCvb61637. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1645) 2.0(1.82) 1.1(4.136.

Affected Software

2 affected components

Cisco Firepower Extensible Operating System=2.0\(1.68\)

Cisco Unified Computing System=3.1\(1k\)a

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Cisco Unified Computing System (UCS) Manager CLI to a version that resolves this vulnerability.
Fixed in 2.0(1.82)Patch CSCvb61351
Upgrade
Upgrade Cisco Unified Computing System (UCS) Manager CLI to a version that resolves this vulnerability.
Patch CSCvb61637
Upgrade
Upgrade Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) CLI to a version that resolves this vulnerability.
Fixed in 92.1(1.1645)Patch CSCvb61351
Upgrade
Upgrade Cisco Firepower 9300 Security Appliance CLI to a version that resolves this vulnerability.
Fixed in 92.2(1.101)Patch CSCvb61637

Event History

Apr 7, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Data Sourced

via NVD·05:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-6600?

CVE-2017-6600 is classified as a high severity vulnerability due to its potential for command injection by an authenticated attacker.

How do I fix CVE-2017-6600?

To mitigate CVE-2017-6600, apply the latest security patches provided by Cisco for the affected software versions.

What systems are affected by CVE-2017-6600?

CVE-2017-6600 affects the Cisco Unified Computing System Manager and Cisco Firepower 4100 and 9300 Series appliances.

Who is impacted by CVE-2017-6600?

Organizations utilizing vulnerable versions of Cisco UCS Manager or Firepower appliances may be impacted by CVE-2017-6600.

Is CVE-2017-6600 a remote attack vector?

No, CVE-2017-6600 requires local authentication for the command injection attack to be executed.