cisco-sa-fxos-cmdinj-b63rwKPm

csafUScisco_csaf

Cisco FXOS Software for Firepower 4100/9300 Series Command Injection Vulnerability

view advisory published 2020-10-21

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to execute commands on the underlying operating system with root privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2020-3459UShigh7.8—
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilit…
02

references

External citations — patches, advisories, analysis.

03

remediations (67)

  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.1.63 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.1.66 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.1.66 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.1.70 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.101 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.137 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.137 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.17 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.19 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.24 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.26 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.26 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.28 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.54 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.54 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.60 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.60 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.71 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.71 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.83 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.83 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.86 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.91 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.97 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.110 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.110 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.111 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.111 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.130 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.130 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.144 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.145 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.155 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.166 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.166 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.173 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.179 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.179 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.180 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.56 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.58 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.66 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.66 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.73 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.73 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.75 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.88 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.88 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.91 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.93 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.99 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.99 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.131 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.131 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.157 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.157 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.166 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.166 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.169 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.169 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.174 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.174 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.187 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.192 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.192 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.8.1.105 when installed on Cisco Firepower 4100 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Firepower Extensible Operating System (FXOS) 2.8.1.105 when installed on Cisco Firepower 9000 Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan