CVE-2020-3545
A vulnerability in Cisco FXOS Software could allow an authenticated, local attacker with administrative credentials to cause a buffer overflow condition. The vulnerability is due to incorrect bounds checking of values that are parsed from a specific file. An attacker could exploit this vulnerability by supplying a crafted file that, when it is processed, may cause a stack-based buffer overflow. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system with root privileges. An attacker would need to have valid administrative credentials to exploit this vulnerability.
Published:Sep 4, 2020
Last Modified:Nov 21, 2024
EPS:Sep 4, 2020
EPSS Score:0.0006
CVSS Score:6
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Firepower 4110
Cisco
Firepower 4110
Vendor
Cisco
Product
Firepower 4112
Cisco
Firepower 4112
Vendor
Cisco
Product
Firepower 4115
Cisco
Firepower 4115
Vendor
Cisco
Product
Firepower 4120
Cisco
Firepower 4120
Vendor
Cisco
Product
Firepower 4125
Cisco
Firepower 4125
Vendor
Cisco
Product
Firepower 4140
Cisco
Firepower 4140
Vendor
Cisco
Product
Firepower 4145
Cisco
Firepower 4145
Vendor
Cisco
Product
Firepower 4150
Cisco
Firepower 4150
Vendor
Cisco
Product
Firepower 9300
Cisco
Firepower 9300
Vendor
Cisco
Product
Firepower Extensible Operating System
Cisco
Firepower Extensible Operating System
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
