CVE-2017-6674

Опубликовано: 13 июн. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1. Known Fixed Releases: 6.2.1 6.2.0.1 6.1.0.2.

Ссылки

http://www.securityfocus.com/bid/98654
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170524-fmc
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/98654
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170524-fmc
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:firesight_system:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firesight_system:6.1.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firesight_system:6.2.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firesight_system:6.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00217

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-x82j-c66q-2vhm