Medium severity6.7NVD Advisory· Published Jul 25, 2017· Updated Jun 17, 2026
CVE-2017-6748
CVE-2017-6748
Description
A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88855. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-234.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19cpe:2.3:a:cisco:web_security_appliance:10.0.0-232:*:*:*:*:*:*:*+ 18 more
- cpe:2.3:a:cisco:web_security_appliance:10.0.0-232:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:10.0.0-233:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:10.0_base:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:10.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:10.1.0-204:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:10.1.1-230:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:10.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:10.5.0-358:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:11.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_appliance:11.0.0-613:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:10.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:10.0_base:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:10.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:10.1_base:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:10.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:10.5_base:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:11.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:web_security_virtual_appliance:11.0_base:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/99918nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1038956nvdThird Party AdvisoryVDB Entry
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170719-wsa2nvdVendor Advisory
News mentions
0No linked articles in our index yet.