QID 317000

A vulnerability in the REST API of Cisco Firepower Device Manager (FDM) On-Box Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. Affected Products Cisco Firepower Device Manager FDM On-Box Software, following releases: From 6.3.0 Prior to 6.4.0.12 From 6.4.1 Prior to 6.4.4 From 6.5.0 Prior to 6.7.0.2

QID Detection Logic (Authenticated):
The Qid checks for the Vulnerable version of Cisco FTD in the response of "version" command.

A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system. To exploit this vulnerability, an attacker would need valid low-privileged user credentials.