← Back

CVE-2020-3166

nvd nist
Published: Feb 26, 2020Modified: Nov 21, 2024

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS). The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted arguments to a specific CLI command. A successful exploit could allow the attacker to read or write to arbitrary files on the underlying OS.

Affected (8)

3 products
Firepower Threat Defense
Configuration A
4 vulnerable · 8 platform
Vulnerable SoftwareAffected Versions
Cisco
From 9.10 to 9.13.1.5
From 9.8 to 9.9.2.66
Cisco
From 6.2.2 to 6.2.3.16
From 6.3.0 to 6.5.0.3
Running on/withPlatform Versions
Cisco
Firepower 1010
All versions
Cisco
Firepower 1120
All versions
Cisco
Firepower 1140
All versions
Cisco
Firepower 1150
All versions
Cisco
Firepower 2110
All versions
Cisco
Firepower 2120
All versions
Cisco
Firepower 2130
All versions
Cisco
Firepower 2140
All versions
Configuration B
4 vulnerable · 8 platform
Vulnerable SoftwareAffected Versions
Cisco
Before 2.2.2.97
From 2.3 to 2.3.1.155
From 2.4 to 2.4.1.238
From 2.6 to 2.6.1.157
Running on/withPlatform Versions
Cisco
Firepower 4110
All versions
Cisco
Firepower 4115
All versions
Cisco
Firepower 4120
All versions
Cisco
Firepower 4125
All versions
Cisco
Firepower 4140
All versions
Cisco
Firepower 4145
All versions
Cisco
Firepower 4150
All versions
Cisco
Firepower 9300
All versions

Timeline

No history available yet.