CVE-2017-6601

A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61384 CSCvb86764. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.101) 92.1(1.1647).

• CWE-78

• http://www.securityfocus.com/bid/97477Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038196
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cli1Vendor Advisory
• http://www.securityfocus.com/bid/97477Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038196
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cli1Vendor Advisory

Published

Apr 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6594The transit path validation code in Heimdal before 7.3 might…7.5
• CVE-2017-6596partclone.chkimg in partclone 0.2.89 is prone to a heap-base…
• CVE-2017-6597A vulnerability in the local-mgmt CLI command of the Cisco U…
• CVE-2017-6598A vulnerability in the debug plug-in functionality of the Ci…
• CVE-2017-6599A vulnerability in Google-defined remote procedure call (gRP…
• CVE-2017-6600A vulnerability in the CLI of the Cisco Unified Computing Sy…
• CVE-2017-6602A vulnerability in the CLI of Cisco Unified Computing System…
• CVE-2017-6603A vulnerability in Cisco ASR 903 or ASR 920 Series Devices r…
• CVE-2017-6604A vulnerability in the web interface of Cisco Integrated Man…
• CVE-2017-6605A vulnerability in the web-based management interface of Cis…
• CVE-2017-6606A vulnerability in a startup script of Cisco IOS XE Software…
• CVE-2017-6607A vulnerability in the DNS code of Cisco ASA Software could …