CVE-2017-6746

A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10.0 and later for WSA on both virtual and hardware appliances. More Information: CSCvd88862. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-235.

• CWE-20

• http://www.securityfocus.com/bid/99877Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038948Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa1Vendor Advisory
• http://www.securityfocus.com/bid/99877Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038948Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa1Vendor Advisory

Published

Jul 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6740The Simple Network Management Protocol (SNMP) subsystem of C…8.8
• CVE-2017-6741A vulnerability in the SNMP implementation of could allow an…8.8
• CVE-2017-6742A vulnerability in the SNMP implementation of could allow an…8.8
• CVE-2017-6743The Simple Network Management Protocol (SNMP) subsystem of C…8.8
• CVE-2017-6744The Simple Network Management Protocol (SNMP) subsystem of C…8.8
• CVE-2017-6745A vulnerability in the cache server within Cisco Videoscape …
• CVE-2017-6747A vulnerability in the authentication module of Cisco Identi…
• CVE-2017-6748A vulnerability in the CLI parser of the Cisco Web Security …
• CVE-2017-6749A vulnerability in the web-based management interface of Cis…
• CVE-2017-6750A vulnerability in AsyncOS for the Cisco Web Security Applia…
• CVE-2017-6751A vulnerability in the web proxy functionality of the Cisco …7.5
• CVE-2017-6752A vulnerability in the web interface of the Cisco Adaptive S…