CVE:CVE-2017-6600
CNNVD:CNNVD-201704-430
Cisco Unified Computing System Manager是美国思科（Cisco）公司的内嵌设备管理软件。Cisco Firepower 4100 Series Next-Generation Firewall和Cisco Firepower 9300 Security Appliance都是美国思科（Cisco）公司的防火墙设备。
多款Cisco产品中的CLI存在命令注入漏洞，该漏洞源于程序没有对受影响的命令执行充分的输入验证。本地攻击者可利用该漏洞执行任意系统命令。以下产品受到影响：Cisco Unified Computing System Manager；Firepower 4100 Series Next-Generation Firewall；Firepower 9300 Security Appliance。
solution:Upgrade cisco firepower_extensible_operating_system to a higher version than 2.0(1.68,and avoid the version 2.0(1.68); Upgrade cisco unified_computing_system to a higher version than 3.1(1ka,and avoid the version 3.1(1k)a