Skip to content
Sign in
CVE-2017-6746Not scoredCWE-20

CVE-2017-6746: Cisco Web Security Appliance vulnerability

Cisco · Cisco Web Security Appliance

Affected: Cisco Web Security Appliance · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

4.4%probability of exploitation in the next 30 days
91st percentile
050100

Higher than 91% of scored CVEs

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid administrator credentials. Affected Products: Cisco AsyncOS Software 10.0 and later for WSA on both virtual and hardware appliances. More Information: CSCvd88862. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-235.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Cisco Web Security ApplianceCisco Web Security Appliance

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Cisco
Published
July 2017

CoverageNo articles yet

No CyberSIXT article names CVE-2017-6746 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in