CVE-2017-3806: Cisco Secure Firewall Threat Defense

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to inject arbitrary shell commands that are executed by the device. More Information: CSCvb61343. Known Affected Releases: 2.0(1.68). Known Fixed Releases: 2.0(1.118) 2.1(1.47) 92.1(1.1646) 92.1(1.1763) 92.2(1.101).

Affected products

• Cisco Secure Firewall Threat Defense: version 5.3.0 only; version 5.4.0 only; version 6.0.0 only; version 6.0.1 only; version 6.1.0 only

Published 2017-02-03. Last modified 2026-08-11.