VYPR
Get started
← All advisories
Medium severity6.7NVD Advisory· Published Jul 25, 2017· Updated May 13, 2026

CVE-2017-6748

CVE-2017-6748

Description

A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88855. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-234.

Affected products

19
  • Cisco Systems, Inc./Web Security Appliance10 versions
    cpe:2.3:a:cisco:web_security_appliance:10.0.0-232:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:cisco:web_security_appliance:10.0.0-232:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.0.0-233:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.0_base:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.1.0-204:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.1.1-230:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:10.5.0-358:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:11.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_appliance:11.0.0-613:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Web Security Virtual Appliance9 versions
    cpe:2.3:a:cisco:web_security_virtual_appliance:10.0.0:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.0_base:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.1_base:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:10.5_base:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:11.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:web_security_virtual_appliance:11.0_base:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.