CVE-2017-6601: OS Command Injection

Published Apr 7, 2017

Updated

A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61384 CSCvb86764. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1647).

Affected Software

2 affected components

Cisco Firepower Extensible Operating System=2.0\(1.68\)

Cisco Unified Computing System=3.1\(1k\)a

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Cisco Unified Computing System (UCS) Manager CLI; Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) CLI; Cisco Firepower 9300 Security Appliance CLI to a version that resolves this vulnerability.
Fixed in 92.2(1.101)
Upgrade
Upgrade Cisco Unified Computing System (UCS) Manager CLI; Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) CLI; Cisco Firepower 9300 Security Appliance CLI to a version that resolves this vulnerability.
Fixed in 92.1(1.1647)
Compensating control
Limit local/console/management CLI access to trusted administrators only, since the vulnerability requires an authenticated, local attacker to perform command injection (see CSCvb61384, CSCvb86764).

Event History

Apr 7, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Data Sourced

via NVD·05:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-6601?

The severity of CVE-2017-6601 is considered high due to its potential for command injection.

How do I fix CVE-2017-6601?

To fix CVE-2017-6601, update your Cisco Unified Computing System and Firepower software to the latest patched version.

Who is affected by CVE-2017-6601?

CVE-2017-6601 affects users of Cisco Unified Computing System software version 3.1(1k)a and Cisco Firepower Extensible Operating System version 2.0(1.68).

What type of attack is associated with CVE-2017-6601?

CVE-2017-6601 is associated with a command injection attack that can be executed by an authenticated, local attacker.

Is CVE-2017-6601 a remote or local vulnerability?

CVE-2017-6601 is a local vulnerability that requires authenticated access to exploit.