CVE-2017-6598

medium

Published 2017-04-07 · Modified 2026-05-13

CVSS v3

6.7

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2

7.2

VIR risk

6.7

Description

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to execute arbitrary commands, aka Privilege Escalation. More Information: CSCvb86725 CSCvb86797. Known Affected Releases: 2.0(1.68) 3.1(1k)A. Known Fixed Releases: 92.2(1.105) 92.1(1.1733) 2.1(1.69).

Predictions

Exploit likelihood

66%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@cisco.com — https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-ucs

Application impact

Vendor	Product	Versions	Fixed
cisco	firepower_extensible_operating_system	`2.0\(1.68\)`
cisco	unified_computing_system	`3.1\(1k\)a`

References

CWEs

CWE-862

Verify integrity in audit chain (admin only). AS-IS.