Cisco Firepower System Software 权限许可和访问控制漏洞

Cisco Adaptive Security Appliance（ASA）5500-X Series with FirePOWER Services等都是美国思科（Cisco）公司的安全设备。Firepower System Software是使用在其中的一套防火墙操作系统。

Cisco Firepower System Software（运行在Cisco Firepower Threat Defense (FTD)传感器上）中的Sourcefire tunnel control channel协议存在权限许可和访问控制漏洞，该漏洞源于受影响的软件对CLI命令没有执行充分的检测。本地攻击者可通过对Firepower传感器和Cisco FMC进行身份验证，然后向Cisco FMC或借助Cisco FMC向其他Firepower传感器发送CLI命令利用该漏洞修改设备配置或删除文件。以下产品受到影响：Cisco Adaptive Security Appliance (ASA) 5500-X Series with FirePOWER Services；Adaptive Security Appliance (ASA) 5500-X Series Next-Generation Firewalls；FirePOWER 7000 Series Appliances；FirePOWER 8000 Series Appliances；Firepower 2100 Series Security Appliances；Firepower 4100 Series Security Appliances；Firepower 9300 Series Security Appliances；Firepower Management Center；Firepower Threat Defense；Firepower Threat Defense Virtual (FTDv)；Virtual Next-Generation Intrusion Prevention System (NGIPSv)。