CVE-2017-3822
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an unauthenticated, remote attacker to add arbitrary entries to the audit log. This affects FTD Software versions 6.1.x on specific products with FDM enabled. An attacker could exploit this to manipulate the audit log, potentially hiding unauthorized actions.
Risk Assessment
The risk includes compromise of audit log integrity, which may hinder attack detection and violate security compliance.
Recommendation
It is recommended to upgrade FTD software to version 6.2.0 or later, which includes the fix, and monitor audit logs for anomalies.
Original NVD description (English source)
A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an unauthenticated, remote attacker to add arbitrary entries to the audit log. This vulnerability affects Cisco Firepower Threat Defense Software versions 6.1.x on the following vulnerable products that have enabled FDM: ASA5506-X ASA5506W-X ASA5506H-X ASA5508-X ASA5516-X ASA5512-X ASA5515-X ASA5525-X ASA5545-X ASA5555-X. More Information: CSCvb86860. Known Affected Releases: FRANGELICO. Known Fixed Releases: 6.2.0.