cisco-sa-20171101-arce: Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance Command Injection Vulnerability
Published Nov 1, 2017
·Updated
Credit
researchers Maor Shwartz(Beyond Security), Noam Rathaus(Beyond Security)
Affected Software
3 affected components
Cisco UCS Manager
Cisco Firepower 4100 Series NGFW
Cisco Firepower 9300 Security Appliance
Event History
Nov 1, 2017
Advisory Published
04:00 PM
Data Sourced
04:00 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of cisco-sa-20171101-arce?
The severity of cisco-sa-20171101-arce is rated medium with a score of 6.7.
2
How do I fix cisco-sa-20171101-arce?
To fix cisco-sa-20171101-arce, update your Cisco UCS Manager or Cisco Firepower appliances to the latest versions as recommended by Cisco.
3
What is the nature of the vulnerability in cisco-sa-20171101-arce?
cisco-sa-20171101-arce is a command injection vulnerability that allows an attacker to execute arbitrary commands.
4
Which products are affected by cisco-sa-20171101-arce?
The affected products include Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance.
5
Is authentication required to exploit cisco-sa-20171101-arce?
Yes, exploitation of cisco-sa-20171101-arce requires elevated privileges.