CVE:CVE-2017-6601
CNNVD:CNNVD-201704-429
Cisco Unified Computing System Manager是美国思科（Cisco）公司的内嵌设备管理软件。Cisco Firepower 4100 Series Next-Generation Firewall和Cisco Firepower 9300 Security Appliance都是美国思科（Cisco）公司的防火墙设备。
多款Cisco产品中的CLI存在命令注入漏洞，该漏洞源于程序没有充分的执行输入验证。本地攻击者可通过向受影响的CLI命令注入特制的命令参数利用该漏洞以用户权限读取或写入任意文件。以下产品受到影响：Cisco Unified Computing System Manager；Firepower 4100 Series Next-Generation Firewall；Firepower 9300 Security Appliance。
solution:Upgrade cisco firepower_extensible_operating_system to a higher version than 2.0(1.68,and avoid the version 2.0(1.68); Upgrade cisco unified_computing_system to a higher version than 3.1(1ka,and avoid the version 3.1(1k)a