RCE in Cisco Firepower 4100 Next-Generation Firewall Firmware
CVE-2017-12243
A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device, aka Command Injection. The vulnerability is due to improper validation of string input in the shell application. An attacker could exploit this vulnerability through the use of malicious commands. A successful exploit could allow the attacker to obtain root shell privileges on the device. Cisco Bug IDs: CSCvf20741, CSCvf60078.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.771 (99.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Cisco Firepower_4100_next-generation_firewall_firmware
- Cisco Firepower_4110_next-generation_firewall
- Cisco Firepower_4120_next-generation_firewall
- Cisco Firepower_4140_next-generation_firewall
- Cisco Firepower_4150_next-generation_firewall
- Cisco Firepower_9300_security_appliance
- Cisco Firepower_9300_security_appliance_firmware
- Cisco Unified_computing_system_manager
- Cisco Unified_computing_system_manager_firmware
- N/a Cisco Ucs Manager, Firepower 4100 Series Ngfw, And 9300 Security Appliance — versions Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Cisco Firepower 9300 Security Appliance
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2017-12243?
- CVE-2017-12243 is a high-severity vulnerability in Cisco Firepower 4100 Next-Generation Firewall Firmware, classified under OS Command Injection. CVSS score: 7.8/10. Published 2017-11-02.
- How severe is CVE-2017-12243?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2017-12243 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.