Improper input validation in Cisco Firepower 4100 Series NGFW and Firepower 9300 Security…
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-77.
Summary
A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges. The vulnerability is due to insufficient input validation of certain Smart Licensing configuration parameters. An authenticated attacker could exploit the vulnerability by configuring a malicious URL within the affected feature. A successful exploit could allow the attacker to execute arbitrary commands with root privileges. This vulnerability affects the following Cisco Firepower Security products running FX-OS code trains 1.1.3, 1.1.4, and 2.0.1 (versions 2.1.1, 2.2.1, and 2.2.2 are not affected): Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance. Cisco Bug IDs: CSCvb86863.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Cisco Firepower 4100 Series NGFW and Firepower 9300 Security Appliance | Cisco Firepower 4100 Series NGFW and Firepower 9300 Security Appliance | — | No fix listed | CNA |
- Cisco Firepower 4100 Series NGFW and Firepower 9300 Security Appliance Vendor— Affected Cisco Firepower 4100 Series NGFW and Firepower 9300 Security Appliance Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:* | up to 1.1.3 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:firepower_extensible_operating_system:1.1.4:*:*:*:*:*:*:* | 1.1.4 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:firepower_extensible_operating_system:2.0.1:*:*:*:*:*:*:* | 2.0.1 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:firepower_4110_next-generation_firewall:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:firepower_4120_next-generation_firewall:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:firepower_4140_next-generation_firewall:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:firepower_4150_next-generation_firewall:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:firepower_9300_security_appliance:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
- cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:* Versions up to 1.1.3 Vulnerable ·Cisco
- cpe:2.3:o:cisco:firepower_extensible_operating_system:1.1.4:*:*:*:*:*:*:* Versions 1.1.4 Vulnerable ·Cisco
- cpe:2.3:o:cisco:firepower_extensible_operating_system:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Cisco
- cpe:2.3:h:cisco:firepower_4110_next-generation_firewall:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:firepower_4120_next-generation_firewall:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:firepower_4140_next-generation_firewall:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:firepower_4150_next-generation_firewall:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:firepower_9300_security_appliance:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-12277
- 2026-10-03 Alias added: GHSA-7g3p-7vv6-j5pw
- 2026-10-31 EPSS moved to the 90th–95th percentile
References
More Cisco Firepower Extensible Operating System vulnerabilities
- TI-2018-00269 Resource management flaw in Cisco FXOS and NX-OS unknown CVSS 3.0CRITICAL 9.8
- TI-2015-05417 An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco… CVSS 3.0CRITICAL 9.8
- TI-2019-01480 Cisco FXOS and NX-OS Software Simple Network Management Protocol Denial of Service Vulnerability CVSS 3.1HIGH 8.6
- TI-2019-01225 Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities CVSS 3.0HIGH 8.6
- TI-2019-01224 Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities CVSS 3.0HIGH 8.6
- TI-2020-03063 Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability CVSS 3.1HIGH 8.6
Sources
- CVE-2017-12277 · CVE Program
- CVE-2017-12277 · NVD
- FIRST EPSS
- GHSA-7g3p-7vv6-j5pw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences