CVE-2017-12243

A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device, aka Command Injection. The vulnerability is due to improper validation of string input in the shell application. An attacker could exploit this vulnerability through the use of malicious commands. A successful exploit could allow the attacker to obtain root shell privileges on the device. Cisco Bug IDs: CSCvf20741, CSCvf60078.

• CWE-78
• CWE-78

• http://www.securityfocus.com/bid/101652Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039719Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-arceVendor Advisory
• http://www.securityfocus.com/bid/101652Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039719Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171101-arceVendor Advisory

Published

Nov 2, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12236A vulnerability in the implementation of the Locator/ID Sepa…
• CVE-2017-12237A vulnerability in the Internet Key Exchange Version 2 (IKEv…7.5
• CVE-2017-12238A vulnerability in the Virtual Private LAN Service (VPLS) co…6.5
• CVE-2017-12239A vulnerability in motherboard console ports of line cards f…6.8
• CVE-2017-1224IBM Tivoli Endpoint Manager uses weaker than expected crypto…
• CVE-2017-12240The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and …9.8
• CVE-2017-12244A vulnerability in the detection engine parsing of IPv6 pack…
• CVE-2017-12245A vulnerability in SSL traffic decryption for Cisco Firepowe…
• CVE-2017-12246A vulnerability in the implementation of the direct authenti…
• CVE-2017-12248A vulnerability in the web framework code of Cisco Unified I…
• CVE-2017-12249A vulnerability in the Traversal Using Relay NAT (TURN) serv…
• CVE-2017-1225IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5…