CVE:CVE-2017-12243
CNNVD:CNNVD-201711-083
Cisco Unified Computing System（UCS）Manager等都是美国思科（Cisco）公司的产品。Cisco Unified Computing System（UCS）Manager是一套内嵌式设备管理软件。Cisco Firepower 4100 Series Next-Generation Firewall（NGFW）和Cisco Firepower 9300 Security Appliance都是防火墙设备。
多款Cisco产品中存在命令注入漏洞，该漏洞源于程序没有正确的验证shell应用程序中输入的字符串。本地攻击者可借助恶意的命令利用该漏洞获取root shell权限。以下产品受到影响：Cisco Unified Computing System Manager；Cisco Firepower 4100 Series Next-Generation Firewall；Cisco Firepower 9300 Security Appliance。
solution:Upgrade cisco unified_computing_system_manager_firmware to a higher version than -; Upgrade cisco firepower_9300_security_appliance_firmware to a higher version than -; Upgrade cisco firepower_4100_next-generation_firewall_firmware to a higher version than -