CVE-2019-12699
Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute commands on the underlying operating system (OS) with root privileges. These vulnerabilities are due to insufficient input validation. An attacker could exploit these vulnerabilities by including crafted arguments to specific CLI commands. A successful exploit could allow the attacker to execute commands on the underlying OS with root privileges.
Published:Oct 2, 2019
Last Modified:Aug 11, 2026
EPS:Oct 2, 2019
EPSS Score:0.00488
CVSS Score:7.8
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Firepower 1000
Cisco
Firepower 1000
Vendor
Cisco
Product
Firepower 2100
Cisco
Firepower 2100
Vendor
Cisco
Product
Firepower 4100
Cisco
Firepower 4100
Vendor
Cisco
Product
Firepower 9300
Cisco
Firepower 9300
Vendor
Cisco
Product
Firepower 9300 Firmware
Cisco
Firepower 9300 Firmware
Vendor
Cisco
Product
Firepower Extensible Operating System
Cisco
Firepower Extensible Operating System
Vendor
Cisco
Product
Secure Firewall Threat Defense
Cisco
Secure Firewall Threat Defense
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
