IT

Tracker / CVE-2020-3166

CVE-2020-3166

Medium 6.7

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS). The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted arguments to a specific CLI command. A successful exploit could allow the attacker to read or write to arbitrary files on the underlying OS.

Affected products and versions

cisco adaptive_security_appliance_software · 9.10 → 9.13.1.5
cisco adaptive_security_appliance_software · 9.8 → 9.9.2.66
cisco firepower_extensible_operating_system · … → 2.2.2.97
cisco firepower_extensible_operating_system · 2.3 → 2.3.1.155
cisco firepower_extensible_operating_system · 2.4 → 2.4.1.238
cisco firepower_extensible_operating_system · 2.6 → 2.6.1.157
cisco secure_firewall_threat_defense · 6.2.2 → 6.2.3.16
cisco secure_firewall_threat_defense · 6.3.0 → 6.5.0.3

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References