PT-2017-3406 · Cisco · Cisco Firepower Security

Published 2017-11-01 · Updated 2023-04-20 · CVE-2017-12277

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firepower Security products running FX-OS versions 1.1.3 through 2.0.1

Description The issue exists due to insufficient input validation of certain Smart Licensing configuration parameters in the Smart Licensing Manager service. This could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges by configuring a malicious URL within the affected feature. A successful exploit could allow the attacker to execute arbitrary commands with root privileges.

Recommendations For versions 1.1.3, 1.1.4, and 2.0.1, consider disabling the Smart Licensing Manager service until a patch is available to prevent exploitation. Restrict access to the Smart Licensing configuration parameters to minimize the risk of arbitrary command execution. Avoid using malicious URLs within the affected feature to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

RCE

Weakness Enumeration

CWE-77

CWE-20

Related Identifiers

BDU:2018-00194

CVE-2017-12277

Affected Products

Cisco Firepower Security

References · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-fpwr · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00194 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-12277 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12277 · Vendor Advisory
• http://securityfocus.com/bid/101661 · Note
• https://t.me/cvenotify/48717 · Telegram Post