Multiple Cisco Products CVE-2017-12277 Remote Command Injection Vulnerability

Bugtraq ID:	101661
Class:	Input Validation Error
CVE:	CVE-2017-12277
Remote:	Yes
Local:	No
Published:	Nov 01 2017 12:00AM
Updated:	Dec 19 2017 09:00PM
Credit:	Cisco.
Vulnerable:	Cisco Firepower 9300 Security Appliance 0 Cisco Firepower 9000 Series 2.0(1.68) Cisco Firepower 4100 Series Next-Generation Firewall 0
Not Vulnerable:	Cisco Firepower 9000 Series 2.0(1.119) Cisco Firepower 9000 Series 2.0(1.104)

Multiple Cisco Products CVE-2017-12277 Remote Command Injection Vulnerability

Multiple Cisco Products are prone to a remote command-injection vulnerability.

An attacker may exploit this issue to inject and execute arbitrary commands within the context of the affected application; this may aid in further attacks.

This issue is being tracked by Cisco Bug ID CSCvb86863.

Multiple Cisco Products CVE-2017-12277 Remote Command Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Cisco Products CVE-2017-12277 Remote Command Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Cisco Products CVE-2017-12277 Remote Command Injection Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco Firepower 4100 Series NGFW and Firepower 9300 Security Appliance Smart Lic (Cisco)