CVE-2017-6735

Опубликовано: 10 июл. 2017

Источник: nvd

CVSS3: 6.7

CVSS2: 7.2

EPSS Низкий

Описание

A vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could allow an authenticated, local attacker to execute arbitrary code on a targeted system. More Information: CSCvc91092. Known Affected Releases: 6.2.0 6.2.1.

Ссылки

http://www.securityfocus.com/bid/99460
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038826
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-FireSIGHT
Vendor Advisory
http://www.securityfocus.com/bid/99460
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038826
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-FireSIGHT
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:firesight_system_software:6.2.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:firesight_system_software:6.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 25%

0.00084

Низкий

6.7 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-p32p-qr9r-gpmg