CVE-2017-6674

EPSS 1.55%
Veröffentlicht 13.06.2017 06:29:01
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1. Known Fixed Releases: 6.2.1 6.2.0.1 6.1.0.2.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Firesight System Version 6.0.1

Cisco ≫ Firesight System Version 6.1.0

Cisco ≫ Firesight System Version 6.2.0

Cisco ≫ Firesight System Version 6.2.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.55%	0.73

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/98654

Third Party Advisory

VDB Entry

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170524-fmc

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2017-6674

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-6674

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-6674

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2017-6674