CVE-2020-3169
Published on: 02/26/2020 12:00:00 AM UTC
Last Modified on: 03/23/2021 11:23:39 PM UTC
CVE-2020-3169 - advisory for cisco-sa-20200226-fpwr-cmdinj
Source: Mitre Source: NIST CVE.ORG Print: PDF
Certain versions of Firepower 4110 from Cisco contain the following vulnerability:
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root on an affected device. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. An attacker would need valid administrator credentials to exploit this vulnerability.
- CVE-2020-3169 has been assigned by
[email protected] to track the vulnerability - currently rated as MEDIUM severity.
- The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.
- Affected Vendor/Software:
Cisco - Cisco Firepower Extensible Operating System (FXOS) version n/a
CVSS3 Score: 6.7 - MEDIUM
Attack Vector ⓘ |
Attack Complexity |
Privileges Required |
User Interaction |
---|---|---|---|
LOCAL | LOW | HIGH | NONE |
Scope | Confidentiality Impact |
Integrity Impact |
Availability Impact |
UNCHANGED | HIGH | HIGH | HIGH |
CVSS2 Score: 7.2 - HIGH
Access Vector ⓘ |
Access Complexity |
Authentication |
---|---|---|
LOCAL | LOW | NONE |
Confidentiality Impact |
Integrity Impact |
Availability Impact |
COMPLETE | COMPLETE | COMPLETE |
CVE References
Description | Tags ⓘ | Link |
---|---|---|
Cisco FXOS Software CLI Command Injection Vulnerability | Patch Vendor Advisory tools.cisco.com text/html |
![]() |
Known Affected Configurations (CPE V2.3)
Type | Vendor | Product | Version | Update | Edition | Language |
---|---|---|---|---|---|---|
Hardware
| Cisco | Firepower 4110 | - | All | All | All |
Hardware
| Cisco | Firepower 4110 | - | All | All | All |
Hardware
| Cisco | Firepower 4115 | - | All | All | All |
Hardware
| Cisco | Firepower 4115 | - | All | All | All |
Hardware
| Cisco | Firepower 4120 | - | All | All | All |
Hardware
| Cisco | Firepower 4120 | - | All | All | All |
Hardware
| Cisco | Firepower 4125 | - | All | All | All |
Hardware
| Cisco | Firepower 4125 | - | All | All | All |
Hardware
| Cisco | Firepower 4140 | - | All | All | All |
Hardware
| Cisco | Firepower 4140 | - | All | All | All |
Hardware
| Cisco | Firepower 4145 | - | All | All | All |
Hardware
| Cisco | Firepower 4145 | - | All | All | All |
Hardware
| Cisco | Firepower 4150 | - | All | All | All |
Hardware
| Cisco | Firepower 4150 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-24 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-24 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-36 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-36 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-40 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-40 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-44 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-44 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-44 X 3 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-44 X 3 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-48 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-48 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-56 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-56 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-56 X 3 | - | All | All | All |
Hardware
| Cisco | Firepower 9300 Sm-56 X 3 | - | All | All | All |
Operating System | Cisco | Fxos | All | All | All | All |
Operating System | Cisco | Fxos | All | All | All | All |
- cpe:2.3:h:cisco:firepower_4110:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_4110:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_4115:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_4115:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_4120:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_4120:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_4125:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_4125:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_4140:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_4140:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_4145:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_4145:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_4150:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_4150:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-24:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-24:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-36:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-36:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-40:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-40:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-44:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-44:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-44_x_3:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-44_x_3:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-48:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-48:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-56:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-56:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-56_x_3:-:*:*:*:*:*:*:*:
- cpe:2.3:h:cisco:firepower_9300_sm-56_x_3:-:*:*:*:*:*:*:*:
- cpe:2.3:o:cisco:fxos:*:*:*:*:*:*:*:*:
- cpe:2.3:o:cisco:fxos:*:*:*:*:*:*:*:*: