CVE-2020-3169
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root on an affected device. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. An attacker would need valid administrator credentials to exploit this vulnerability.
Published:Feb 26, 2020
Last Modified:Nov 21, 2024
EPS:Feb 26, 2020
EPSS Score:0.00146
CVSS Score:6.7
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Firepower 4110
Cisco
Firepower 4110
Vendor
Cisco
Product
Firepower 4115
Cisco
Firepower 4115
Vendor
Cisco
Product
Firepower 4120
Cisco
Firepower 4120
Vendor
Cisco
Product
Firepower 4125
Cisco
Firepower 4125
Vendor
Cisco
Product
Firepower 4140
Cisco
Firepower 4140
Vendor
Cisco
Product
Firepower 4145
Cisco
Firepower 4145
Vendor
Cisco
Product
Firepower 4150
Cisco
Firepower 4150
Vendor
Cisco
Product
Firepower 9300 Sm-24
Cisco
Firepower 9300 Sm-24
Vendor
Cisco
Product
Firepower 9300 Sm-36
Cisco
Firepower 9300 Sm-36
Vendor
Cisco
Product
Firepower 9300 Sm-40
Cisco
Firepower 9300 Sm-40
Vendor
Cisco
Product
Firepower 9300 Sm-44
Cisco
Firepower 9300 Sm-44
Vendor
Cisco
Product
Firepower 9300 Sm-44 X 3
Cisco
Firepower 9300 Sm-44 X 3
Vendor
Cisco
Product
Firepower 9300 Sm-48
Cisco
Firepower 9300 Sm-48
Vendor
Cisco
Product
Firepower 9300 Sm-56
Cisco
Firepower 9300 Sm-56
Vendor
Cisco
Product
Firepower 9300 Sm-56 X 3
Cisco
Firepower 9300 Sm-56 X 3
Vendor
Cisco
Product
Firepower Extensible Operating System
Cisco
Firepower Extensible Operating System
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
