Vulnerability Details CVE-2017-3806
A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to inject arbitrary shell commands that are executed by the device. More Information: CSCvb61343. Known Affected Releases: 2.0(1.68). Known Fixed Releases: 2.0(1.118) 2.1(1.47) 92.1(1.1646) 92.1(1.1763) 92.2(1.101).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.1%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 4.6
References
Products affected by CVE-2017-3806
-
cpe:2.3:a:cisco:firepower_threat_defense:5.3.0
-
cpe:2.3:a:cisco:firepower_threat_defense:5.4.0
-
cpe:2.3:a:cisco:firepower_threat_defense:6.0.0
-
cpe:2.3:a:cisco:firepower_threat_defense:6.0.1
-
cpe:2.3:a:cisco:firepower_threat_defense:6.1.0