Cisco Firepower System Software Remote Execution Vulnerability

CVE-2017-6674

What is CVE-2017-6674?

A vulnerability in the Cisco Firepower System Software’s license management functionality may allow unauthorized remote attackers to bypass URL filters set on affected devices. This can lead to unauthorized access and potential exploitation of the network, putting sensitive data at risk. The affected versions include 6.0.1, 6.1.0, 6.2.0, and 6.2.1, with fixed releases available to mitigate this security concern.

References