CVE-2020-3457
Summary
| CVE | CVE-2020-3457 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-10-21 19:15:00 UTC |
| Updated | 2023-08-16 16:17:00 UTC |
| Description | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to execute commands on the underlying operating system with root privileges. |
Risk And Classification
Problem Types: CWE-78
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Adaptive Security Appliance | All | All | All | All |
| Application | Cisco | Adaptive Security Appliance | All | All | All | All |
| Operating System | Cisco | Adaptive Security Appliance Software | All | All | All | All |
| Hardware | Cisco | Firepower 1000 | - | All | All | All |
| Hardware | Cisco | Firepower 1000 | - | All | All | All |
| Hardware | Cisco | Firepower 1010 | - | All | All | All |
| Hardware | Cisco | Firepower 1010 | - | All | All | All |
| Hardware | Cisco | Firepower 1120 | - | All | All | All |
| Hardware | Cisco | Firepower 1120 | - | All | All | All |
| Hardware | Cisco | Firepower 1140 | - | All | All | All |
| Hardware | Cisco | Firepower 1140 | - | All | All | All |
| Hardware | Cisco | Firepower 1150 | - | All | All | All |
| Hardware | Cisco | Firepower 1150 | - | All | All | All |
| Hardware | Cisco | Firepower 2100 | - | All | All | All |
| Hardware | Cisco | Firepower 2100 | - | All | All | All |
| Hardware | Cisco | Firepower 2110 | - | All | All | All |
| Hardware | Cisco | Firepower 2110 | - | All | All | All |
| Hardware | Cisco | Firepower 2120 | - | All | All | All |
| Hardware | Cisco | Firepower 2120 | - | All | All | All |
| Hardware | Cisco | Firepower 2130 | - | All | All | All |
| Hardware | Cisco | Firepower 2130 | - | All | All | All |
| Hardware | Cisco | Firepower 2140 | - | All | All | All |
| Hardware | Cisco | Firepower 2140 | - | All | All | All |
| Hardware | Cisco | Firepower 4110 | - | All | All | All |
| Hardware | Cisco | Firepower 4110 | - | All | All | All |
| Hardware | Cisco | Firepower 4112 | - | All | All | All |
| Hardware | Cisco | Firepower 4112 | - | All | All | All |
| Hardware | Cisco | Firepower 4115 | - | All | All | All |
| Hardware | Cisco | Firepower 4115 | - | All | All | All |
| Hardware | Cisco | Firepower 4120 | - | All | All | All |
| Hardware | Cisco | Firepower 4120 | - | All | All | All |
| Hardware | Cisco | Firepower 4125 | - | All | All | All |
| Hardware | Cisco | Firepower 4125 | - | All | All | All |
| Hardware | Cisco | Firepower 4140 | - | All | All | All |
| Hardware | Cisco | Firepower 4140 | - | All | All | All |
| Hardware | Cisco | Firepower 4145 | - | All | All | All |
| Hardware | Cisco | Firepower 4145 | - | All | All | All |
| Hardware | Cisco | Firepower 4150 | - | All | All | All |
| Hardware | Cisco | Firepower 4150 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-24 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-24 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-36 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-36 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-40 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-40 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-44 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-44 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-44 X 3 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-44 X 3 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-48 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-48 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-56 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-56 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-56 X 3 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 Sm-56 X 3 | - | All | All | All |
| Operating System | Cisco | Firepower Extensible Operating System | All | All | All | All |
| Operating System | Cisco | Firepower Extensible Operating System | All | All | All | All |
| Operating System | Cisco | Firepower Threat Defense | All | All | All | All |
| Operating System | Cisco | Firepower Threat Defense | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco FXOS Software Command Injection Vulnerability | CISCO | tools.cisco.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 316804 Cisco FXOS Software Command Injection Vulnerability(cisco-sa-fxos-cmdinj-pqZvmXCr)