CVE-2017-3822

MediumCVSS 5.3/10Last modified Aug 11, 2026

Description

A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an unauthenticated, remote attacker to add arbitrary entries to the audit log. This vulnerability affects Cisco Firepower Threat Defense Software versions 6.1.x on the following vulnerable products that have enabled FDM: ASA5506-X ASA5506W-X ASA5506H-X ASA5508-X ASA5516-X ASA5512-X ASA5515-X ASA5525-X ASA5545-X ASA5555-X. More Information: CSCvb86860. Known Affected Releases: FRANGELICO. Known Fixed Releases: 6.2.0.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	Cisco Firepower Threat Defense Software versions 6.1.x	Cisco Firepower Threat Defense Software versions 6.1.x

References

http://www.securityfocus.com/bid/95944Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037775
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw2Vendor Advisory
http://www.securityfocus.com/bid/95944Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037775
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw2Vendor Advisory

Timeline

Published: Feb 3, 2017
Last modified: Aug 11, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-38238.8An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on M CVE-2017-38246.8A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attac CVE-2017-38257.5A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an unauthentica CVE-2017-38267.5A vulnerability in the Stream Control Transmission Protocol (SCTP) decoder of the Cisco NetFlow Generation Appliance (NGA) with software bef CVE-2017-38275.8A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (E CVE-2017-38286.1A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remot CVE-2017-38296.1A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remot CVE-2017-38307.5A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to cause a denial of se CVE-2017-38319.8A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to CVE-2017-38327.5A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attac CVE-2017-38336.1A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cr CVE-2017-38349.8A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software could allow