CVE-2017-6674

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass URL filters that have been configured for an affected device. More Information: CSCvb16413. Known Affected Releases: 6.0.1 6.1.0 6.2.0 6.2.1. Known Fixed Releases: 6.2.1 6.2.0.1 6.1.0.2.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
n/aCisco Firepower System SoftwareCisco Firepower System Software

References

Timeline

Published
Jun 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-66756.1A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a refleCVE-2017-66787.5A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software 1CVE-2017-66796.4The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior contained an undocumented encrypted remote support tunnel (SSH) which auto initCVE-2017-66807.5A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create CVE-2017-66817.5A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to exeCVE-2017-66828.8A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to run arbitrary commanCVE-2017-66838.8A vulnerability in the esc_listener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to executeCVE-2017-66848.8A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the LCVE-2017-66858.8A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the managementCVE-2017-66868.8A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the managemenCVE-2017-66878.8A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the managemenCVE-2017-66888.8A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the L
CVE-2017-6674: High severity, CVSS 7.5 | Vulnix