PatchSiren

PatchSiren cyber security CVE debrief

CVE-2017-3809 Cisco CVE debrief

CVE-2017-3809 affects Cisco Firepower Management Center (FMC) policy deployment in the 6.1.0 and 6.2.0 releases. According to the CVE record, an unauthenticated remote attacker could interfere with policy deployment so the rule base is not complete or accurate. Cisco lists fixed releases 6.1.0.1 and 6.2.0, and NVD classifies the issue as network-reachable with low attack complexity and integrity impact.

Vendor
Cisco
Product
Secure Firewall Management Center
CVSS
MEDIUM 5.8
CISA KEV
Not listed in stored evidence
Original CVE published
2017-02-03
Original CVE updated
2026-05-13
Advisory published
2017-02-03
Advisory updated
2026-05-13

Who should care

Cisco FMC administrators, security operations teams, and anyone relying on FMC-managed policy deployment in affected 6.1.0 or 6.2.0 environments should review this issue.

Technical summary

NVD maps the issue to Cisco Secure Firewall Management Center (FMC) 6.1.0 and 6.2.0 via vulnerable CPE criteria. The CVSS v3.0 vector is AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N, indicating a remotely reachable issue with no privileges or user interaction required and a limited integrity impact. NVD lists CWE-20 (improper input validation) as the associated weakness. The CVE description states the weakness is in the policy deployment module and may prevent deployment of a complete and accurate rule base.

Defensive priority

Medium. The issue is network-reachable and unauthenticated, but the supplied severity is CVSS 5.8 / Medium and the impact is described as integrity-only and limited. Prioritize remediation if FMC policy deployment integrity is operationally important.

Recommended defensive actions

  • Upgrade Cisco Firepower Management Center to a fixed release listed by Cisco: 6.1.0.1 or later for the 6.1.0 line, or the fixed 6.2.0 release noted in the CVE record.
  • Verify that policy deployments complete successfully after remediation and that the deployed rule base matches the intended configuration.
  • Review FMC deployment logs and change records for unexpected deployment failures or incomplete policy updates during the exposure window.
  • Track Cisco PSIRT advisory guidance referenced by the NVD record for any additional vendor-specific remediation details.

Evidence notes

All statements are derived from the supplied CVE/NVD corpus and the referenced Cisco advisory URL. The CVE was published on 2017-02-03T07:59:00.687Z and modified on 2026-05-13T00:24:29.033Z; those dates are used only as publication/modification context, not as the issue date. NVD lists affected CPEs for Cisco Secure Firewall Management Center 6.1.0 and 6.2.0 and identifies CWE-20. The supplied enrichment indicates no KEV listing.

Sources and references

Verified primary and authoritative sources

  • CVE-2017-3809 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2017-3809

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2017-3809 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2017-3809

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.