2 lines
3.9 KiB
JSON
2 lines
3.9 KiB
JSON
{"affected":[{"affectedData":[{"product":"Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance 2.0(1.68)","vendor":"n/a","versions":[{"status":"affected","version":"Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance 2.0(1.68)"}]}],"source":"psirt@cisco.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"C5CD105C-71F1-451B-82FC-EBE4A5EB976B","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A551761E-6705-4F5A-BAA8-8C973244FDF2","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BEA82DA5-F72E-45A4-AB7D-C8C2E1C98138","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FB8EEF6B-B143-4079-BE05-C5754317B3EA","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"692CE439-3F58-45F7-8B9D-3D7FDD4F1300","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to inject arbitrary shell commands that are executed by the device. More Information: CSCvb61343. Known Affected Releases: 2.0(1.68). Known Fixed Releases: 2.0(1.118) 2.1(1.47) 92.1(1.1646) 92.1(1.1763) 92.2(1.101)."},{"lang":"es","value":"Una vulnerabilidad en el procesamiento de comandos CLI en el Firewall de próxima generación Cisco Firepower 4100 y en el dispositivo de seguridad Cisco Firepower 9300 podría permitir a un atacante autenticado y local inyectar comandos shell arbitrarios ejecutados por el dispositivo. Más información: CSCvb61343. Lanzamientos Afectados Conocidos: 2.0 (1.68). Lanzamientos Reparados Conocidos: 2,0 (1,118) 2,1 (1,47) 92,1 (1,1646) 92,1 (1,1763) 92,2 (1,101)."}],"id":"CVE-2017-3806","lastModified":"2026-08-11T19:33:44.513","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.6,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":3.9,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.0"},"exploitabilityScore":1.8,"impactScore":3.4,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-02-03T07:59:00.657","references":[{"source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/95943"},{"source":"psirt@cisco.com","tags":["Vendor Advisory"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/95943"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw"}],"sourceIdentifier":"psirt@cisco.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"nvd@nist.gov","type":"Primary"}]}
|