VDB
CVE-2017-3806
CVE-2017-3806
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to inject arbitrary shell commands that are executed by the device. More Information: CSCvb61343. Known Affected Releases: 2.0(1.68). Known Fixed Releases: 2.0(1.118) 2.1(1.47) 92.1(1.1646) 92.1(1.1763) 92.2(1.101).
EPSS 0.10% · 26.8th percentile
Risk Scores
CVSS 3.0
5.300000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score
0.10%
26.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance 2.0(1.68) | * |
| cisco | firepower_threat_defense | 5.3.0, 5.4.0, 6.0.0 |
Exploit Intelligence
Timeline
- Feb 1, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- May 17, 2022 CVE Updated
- Sep 5, 2022 EPSS Score
- Nov 6, 2022 EPSS Score