Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-3801 State: PUBLISHED Published: 2017-02-15T20:00:00 Last Updated: 2024-08-05T14:39:41.012Z Vendors: n/a Products: Cisco UCS Director versions 6.0.0.0 and 6.0.0.1 Problem Types: CWE-264 Description: A vulnerability in the web-based GUI of Cisco UCS Director 6.0.0.0 and 6.0.0.1 could allow an authenticated, local attacker to execute arbitrary workflow items with just an end-user profile, a Privilege Escalation Vulnerability. The vulnerability is due to improper role-based access control (RBAC) after the Developer Menu is enabled in Cisco UCS Director. An attacker could exploit this vulnerability by enabling Developer Mode for his/her user profile with an end-user profile and
acker could exploit this vulnerability by enabling Developer Mode for his/her user profile with an end-user profile and then adding new catalogs with arbitrary workflow items to his/her profile. An exploit could allow an attacker to perform any actions defined by these workflow items, including actions affecting other tenants. Cisco Bug IDs: CSCvb64765. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037830 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-ucs - http://www.securityfocus.com/bid/96235
CVE ID: CVE-2017-3802 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-05T14:39:41.058Z Vendors: n/a Products: Cisco Unified Communications Manager 12.0(0.99000.9) Problem Types: unspecified Description: A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases: 12.0(0.99000.9). Known Fixed Releases: 12.0(0.98000.176) 12.0(0.98000.414) 12.0(0.98000.531) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.8). Additional Analyst Notes: - CVE Program Container: References: - h
1) 12.0(0.98000.536) 12.0(0.98000.6) 12.0(0.98500.8). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037655 - http://www.securityfocus.com/bid/95636 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-cucm1
CVE ID: CVE-2017-3803 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-05T14:39:40.976Z Vendors: n/a Products: Cisco IOS Problem Types: unspecified Description: A vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches could allow an unauthenticated, adjacent attacker to cause a memory leak in the software forwarding queue that would eventually lead to a partial denial of service (DoS) condition. More Information: CSCva72252. Known Affected Releases: 15.2(2)E3 15.2(4)E1. Known Fixed Releases: 15.2(2)E6 15.2(4)E3 15.2(5)E1 15.2(5.3.28i)E1 15.2(6.0.49i)E 3.9(1)E. Additional Analyst Notes: - CVE Program Container: References: - http://www.
)E1 15.2(5.3.28i)E1 15.2(6.0.49i)E 3.9(1)E. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95632 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-catalyst - http://www.securitytracker.com/id/1037657
CVE ID: CVE-2017-3804 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-05T14:39:40.932Z Vendors: n/a Products: Cisco Nexus 5000, 6000, 7000 Problem Types: unspecified Description: A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath domain crash because of an __inst_001__isis_fabricpath hap reset when processing a crafted link-state packet. More Information: CSCvc45002. Known Affected Releases: 7.1(3)N1(2.1) 7.1(3)N1(3.12) 7.3(2)N1(0.296) 8.0(1)S2. Kn
packet. More Information: CSCvc45002. Known Affected Releases: 7.1(3)N1(2.1) 7.1(3)N1(3.12) 7.3(2)N1(0.296) 8.0(1)S2. Known Fixed Releases: 6.2(18)S11 7.0(3)I5(1.170) 7.0(3)I5(2) 7.1(4)N1(0.4) 7.1(4)N1(1b) 7.1(5)N1(0.986) 7.1(5)N1(1) 7.2(3)D1(0.8) 7.3(2)N1(0.304) 7.3(2)N1(1) 8.0(0.96)S0 8.0(1) 8.0(1)E1 8.0(1)S4 8.3(0)CV(0.788). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037658 - http://www.securityfocus.com/bid/95638 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-nexus
CVE ID: CVE-2017-3805 State: PUBLISHED Published: 2017-01-26T07:45:00 Last Updated: 2024-08-05T14:39:40.922Z Vendors: n/a Products: Cisco IOS and Cisco IOx Problem Types: unspecified Description: A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticated, remote attacker to view confidential information that is displayed without authenticating to the device. Affected Products: This vulnerability affects Cisco IOS Software and Cisco IOx Software running on IR829, IR809, IE4K, and CGR1K platforms. More Information: CSCvb20897. Known Affected Releases: 1.0(0). Additional Analyst Notes: - CVE Program Container: References: - http://ww
CSCvb20897. Known Affected Releases: 1.0(0). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037654 - http://www.securityfocus.com/bid/95644 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-ios
CVE ID: CVE-2017-3806 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-05T14:39:41.075Z Vendors: n/a Products: Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance 2.0(1.68) Problem Types: inject arbitrary shell commands Description: A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to inject arbitrary shell commands that are executed by the device. More Information: CSCvb61343. Known Affected Releases: 2.0(1.68). Known Fixed Releases: 2.0(1.118) 2.1(1.47) 92.1(1.1646) 92.1(1.1763) 92.2(1.
b61343. Known Affected Releases: 2.0(1.68). Known Fixed Releases: 2.0(1.118) 2.1(1.47) 92.1(1.1646) 92.1(1.1763) 92.2(1.101). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw - http://www.securityfocus.com/bid/95943
CVE ID: CVE-2017-3807 State: PUBLISHED Published: 2017-02-09T17:00:00 Last Updated: 2024-08-05T14:39:40.554Z Vendors: n/a Products: Cisco ASA Software with Clientless SSL VPN portal is enabled Major Releases 9.0-9.6 Problem Types: CWE-119 Description: A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software, Major Releases 9.0-9.6, could allow an authenticated, remote attacker to cause a heap overflow. The vulnerability is due to insufficient validation of user supplied input. An attacker could exploit this vulnerability by sending a crafted URL to the affected system. An exploit could allow the remote attacker to cause a reload
erability by sending a crafted URL to the affected system. An exploit could allow the remote attacker to cause a reload of the affected system or potentially execute code. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability affects systems configured in routed firewall mode only and in single or multiple context mode. This vulnerability can be triggered by IPv4 or IPv6 traffic. A valid TCP connection is needed to perform the attack. The attacker needs to have valid credentials to log in to the Clientless SSL VPN portal. Vulnerable Cisco ASA Software running on the following products may be affected by this vulnerability: Cisco ASA
ortal. Vulnerable Cisco ASA Software running on the following products may be affected by this vulnerability: Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco ASA for Firepower 9300 Series, Cisco ASA for Firepower 4100 Series. Cisco Bug IDs: CSCvc23838. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170208-asa - https://www.exploit-db.com/exploits/41369/ - http://www.securitytracker.com/id/1037797 - http://www.securityfocus.com/bid/96161
CVE ID: CVE-2017-3808 State: PUBLISHED Published: 2017-04-20T22:00:00 Last Updated: 2024-08-05T14:39:41.198Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: CWE-119 Description: A vulnerability in the Session Initiation Protocol (SIP) UDP throttling process of Cisco Unified Communications Manager (Cisco Unified CM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient rate limiting protection. An attacker could exploit this vulnerability by sending the affected device a high rate of SIP messages. An exploit could allow the attacker to cause the device to reload un
ng the affected device a high rate of SIP messages. An exploit could allow the attacker to cause the device to reload unexpectedly. The device and services will restart automatically. This vulnerability affects Cisco Unified Communications Manager (CallManager) releases prior to the first fixed release; the following list indicates the first minor release that includes the fix for this vulnerability: 10.5.2.14900-16 11.0.1.23900-5 11.5.1.12900-2. Cisco Bug IDs: CSCuz72455. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038318 - http://www.securityfocus.com/bid/97922 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ci
8318 - http://www.securityfocus.com/bid/97922 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-ucm
CVE ID: CVE-2017-3809 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-05T14:39:40.560Z Vendors: n/a Products: Cisco Firepower Management Center (FMC) 6.1.0 6.2.0 Problem Types: prevent deployment of a complete and accurate rule base Description: A vulnerability in the Policy deployment module of the Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to prevent deployment of a complete and accurate rule base. More Information: CSCvb95281. Known Affected Releases: 6.1.0 6.2.0. Known Fixed Releases: 6.1.0.1 6.2.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037776 - http://www.secu
tional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037776 - http://www.securityfocus.com/bid/95941 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fmc
CVE ID: CVE-2017-3810 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-05T14:39:40.801Z Vendors: n/a Products: Cisco Prime Service Catalog 10.0_R2_tanggula Problem Types: web URL redirect attack Description: A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL redirect attack against a user who is logged in to an affected system. More Information: CSCvb21745. Known Affected Releases: 10.0_R2_tanggula. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95947 - http://www.securitytracker.com/id/1037772 - https://tools.cisco.com/security/center/co
www.securityfocus.com/bid/95947 - http://www.securitytracker.com/id/1037772 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-psc
CVE ID: CVE-2017-3811 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:41.148Z Vendors: n/a Products: Cisco WebEx Meetings Server Problem Types: XML External Entity Vulnerability Description: An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc39165. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.2054. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96912 - http://www.securitytracker.com/id/1038042 - https://tools.cisco.com/security/center/co
www.securityfocus.com/bid/96912 - http://www.securitytracker.com/id/1038042 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-wms
CVE ID: CVE-2017-3812 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-05T14:39:40.778Z Vendors: n/a Products: Cisco Industrial Ethernet 2000 Switches 15.2(5.4.32i)E2 Problem Types: denial of service (DoS) Description: A vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to a system memory leak. More Information: CSCvc54788. Known Affected Releases: 15.2(5.4.32i)E2. Known Fixed Releases: 15.2(5.4.62i)E2. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/
xed Releases: 15.2(5.4.62i)E2. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-psc1 - http://www.securityfocus.com/bid/95946 - http://www.securitytracker.com/id/1037771
CVE ID: CVE-2017-3813 State: PUBLISHED Published: 2017-02-09T17:00:00 Last Updated: 2024-08-05T14:39:41.248Z Vendors: n/a Products: Cisco AnyConnect Secure Mobility Client Software for Windows Versions prior to released versions 4.4.00243 and later and 4.3.05017 and later. Problem Types: CWE-264 Description: A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows could allow an unauthenticated, local attacker to open Internet Explorer with the privileges of the SYSTEM user. The vulnerability is due to insufficient implementation of the access controls. An attacker could exploit this vulnerability by opening the Internet Explorer
nt implementation of the access controls. An attacker could exploit this vulnerability by opening the Internet Explorer browser. An exploit could allow the attacker to use Internet Explorer with the privileges of the SYSTEM user. This may allow the attacker to execute privileged commands on the targeted system. This vulnerability affects versions prior to released versions 4.4.00243 and later and 4.3.05017 and later. Cisco Bug IDs: CSCvc43976. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170208-anyconnect - https://www.exploit-db.com/exploits/41476/ - http://www.securitytracker.com/id/1037796
ry/cisco-sa-20170208-anyconnect - https://www.exploit-db.com/exploits/41476/ - http://www.securitytracker.com/id/1037796 - http://www.securityfocus.com/bid/96145
CVE ID: CVE-2017-3814 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-05T14:39:40.651Z Vendors: n/a Products: Cisco Firepower System Software 5.x 6.x Problem Types: bypass ability to block certain web content Description: A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's ability to block certain web content, aka a URL Bypass. More Information: CSCvb93980. Known Affected Releases: 5.3.0 5.4.0 6.0.0 6.0.1 6.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw1 - http://www.securi
nces: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw1 - http://www.securityfocus.com/bid/95942
CVE ID: CVE-2017-3815 State: PUBLISHED Published: 2017-03-17T22:00:00 Last Updated: 2024-08-05T14:39:40.922Z Vendors: n/a Products: Cisco TelePresence Server Problem Types: API Privilege Vulnerability Description: An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpoints. Affected Products: This vulnerability affects Cisco TelePresence Server MSE 8710 Processors that are running a software release prior to Cisco TelePresence Software Release 4.3 and are running in locally managed mode. The vulnerable API was deprecated in Cisco TelePresence Software Release 4.3. More Information: CSCvc37
ly managed mode. The vulnerable API was deprecated in Cisco TelePresence Software Release 4.3. More Information: CSCvc37616. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-tps - http://www.securityfocus.com/bid/96922 - http://www.securitytracker.com/id/1038035
CVE ID: CVE-2017-3817 State: PUBLISHED Published: 2017-04-07T17:00:00 Last Updated: 2024-08-05T14:39:40.628Z Vendors: n/a Products: Cisco UCS Director Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in a UCS domain. More Information: CSCvc32434. Known Affected Releases: 5.5(0.1) 6.0(0.0). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs-director - http://
rences: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs-director - http://www.securitytracker.com/id/1038194 - http://www.securityfocus.com/bid/97430
CVE ID: CVE-2017-3818 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-05T14:39:41.067Z Vendors: n/a Products: Cisco AsyncOS 9.7.1-066 Problem Types: Filtering Bypass Description: A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device, aka a Malformed MIME Header Filtering Bypass. This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply
ftware for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. More Information: CSCvb65245. Known Affected Releases: 9.7.1-066. Known Fixed Releases: 9.8.0-092. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-esa1 - http://www.securityfocus.com/bid/95939 - http://www.securitytracker.com/id/1037773
CVE ID: CVE-2017-3819 State: PUBLISHED Published: 2017-03-15T20:00:00 Last Updated: 2024-08-05T14:39:41.048Z Vendors: n/a Products: Cisco StarOS Problem Types: CWE-264 Description: A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and Cisco Virtualized Packet Core could allow an authenticated, remote attacker to gain unrestricted, root shell access. The vulnerability is due to missing input validation of parameters passed during SSH or SFTP login. An attacker could exploit this vulnerability by providing crafted user input to the SSH or SFTP command-line interface (CLI)
tacker could exploit this vulnerability by providing crafted user input to the SSH or SFTP command-line interface (CLI) during SSH or SFTP login. An exploit could allow an authenticated attacker to gain root privileges access on the router. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability can be triggered via both IPv4 and IPv6 traffic. An established TCP connection toward port 22, the SSH default port, is needed to perform the attack. The attacker must have valid credentials to login to the system via SSH or SFTP. The following products have been confirmed to be vulnerable: Cisco ASR 5000/5500/5700 Series devices running StarOS
FTP. The following products have been confirmed to be vulnerable: Cisco ASR 5000/5500/5700 Series devices running StarOS after 17.7.0 and prior to 18.7.4, 19.5, and 20.2.3 with SSH configured are vulnerable. Cisco Virtualized Packet Core - Single Instance (VPC-SI) and Distributed Instance (VPC-DI) devices running StarOS prior to N4.2.7 (19.3.v7) and N4.7 (20.2.v0) with SSH configured are vulnerable. Cisco Bug IDs: CSCva65853. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96913 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170315-asr - http://www.securitytracker.com/id/1038050
CVE ID: CVE-2017-3820 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-05T14:39:40.407Z Vendors: n/a Products: Cisco IOS XE 15.x Problem Types: DoS Description: A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S, or 3.17.1S could allow an authenticated, remote attacker to cause high CPU usage on an affected device, resulting in a denial of service (DoS) condition. More Information: CSCux68796. Known Affected Releases: 15.5(3)S2.1 15.6(1)S1.1. Known Fixed Releases: 15.4(3)S6.1 15.4(3)S6.2 15.5(3)S2.2 15.5(3)S3 15.6(0.22)S0.23 15.6(1)S2 16.2(0.29
2.1 15.6(1)S1.1. Known Fixed Releases: 15.4(3)S6.1 15.4(3)S6.2 15.5(3)S2.2 15.5(3)S3 15.6(0.22)S0.23 15.6(1)S2 16.2(0.295) 16.3(0.94) 15.5.3S3. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-asrsnmp - http://www.securitytracker.com/id/1037770 - http://www.securityfocus.com/bid/95934
CVE ID: CVE-2017-3821 State: PUBLISHED Published: 2017-02-22T02:00:00 Last Updated: 2024-08-05T14:39:41.012Z Vendors: n/a Products: Cisco Unified Communications Manager Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting (XSS) attacks. More Information: CSCvc49348. Known Affected Releases: 10.5(2.14076.1). Known Fixed Releases: 12.0(0.98000.209) 12.0(0.98000.478) 12.0(0.98000.609). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvis
Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170215-cucm - http://www.securityfocus.com/bid/96241 - http://www.securitytracker.com/id/1037839
CVE ID: CVE-2017-3822 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-05T14:39:40.563Z Vendors: n/a Products: Cisco Firepower Threat Defense Software versions 6.1.x Problem Types: add arbitrary entries to the audit log Description: A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an unauthenticated, remote attacker to add arbitrary entries to the audit log. This vulnerability affects Cisco Firepower Threat Defense Software versions 6.1.x on the following vulnerable products that have enabled FDM: ASA5506-X ASA5506W-X ASA5506H-X ASA5508-X ASA5516-X ASA5512-X ASA5515-X ASA5525-X ASA5545-X ASA55