CVE-2020-3169
Cisco FXOS Software CLI Command Injection Vulnerability
Severity Score
6.7
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root on an affected device. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. An attacker would need valid administrator credentials to exploit this vulnerability.
Una vulnerabilidad en la CLI de Cisco FXOS Software podría permitir a un atacante local autenticado ejecutar comandos arbitrarios en el sistema operativo Linux subyacente con un nivel de privilegio root sobre un dispositivo afectado. La vulnerabilidad es debido a una comprobación insuficiente de los argumentos pasados a un comando de la CLI específico sobre el dispositivo afectado. Un atacante podría explotar esta vulnerabilidad al incluir entradas maliciosas como argumento de un comando afectado. Una explotación con éxito podría permitir al atacante ejecutar comandos arbitrarios en el sistema operativo Linux subyacente con privilegios root. Un atacante necesitaría credenciales de administrador válidas para explotar esta vulnerabilidad.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-12-12 CVE Reserved
- 2020-02-26 CVE Published
- 2023-03-08 EPSS Updated
- 2024-11-15 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-fpwr-cmdinj | 2023-04-20 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4110 Search vendor "Cisco" for product "Firepower 4110" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4115 Search vendor "Cisco" for product "Firepower 4115" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4120 Search vendor "Cisco" for product "Firepower 4120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4125 Search vendor "Cisco" for product "Firepower 4125" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4140 Search vendor "Cisco" for product "Firepower 4140" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4145 Search vendor "Cisco" for product "Firepower 4145" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4150 Search vendor "Cisco" for product "Firepower 4150" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-24 Search vendor "Cisco" for product "Firepower 9300 Sm-24" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-36 Search vendor "Cisco" for product "Firepower 9300 Sm-36" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-40 Search vendor "Cisco" for product "Firepower 9300 Sm-40" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-44 Search vendor "Cisco" for product "Firepower 9300 Sm-44" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-44 X 3 Search vendor "Cisco" for product "Firepower 9300 Sm-44 X 3" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-48 Search vendor "Cisco" for product "Firepower 9300 Sm-48" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-56 Search vendor "Cisco" for product "Firepower 9300 Sm-56" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.2 < 2.2.2.97 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.2 < 2.2.2.97" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-56 X 3 Search vendor "Cisco" for product "Firepower 9300 Sm-56 X 3" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4110 Search vendor "Cisco" for product "Firepower 4110" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4115 Search vendor "Cisco" for product "Firepower 4115" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4120 Search vendor "Cisco" for product "Firepower 4120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4125 Search vendor "Cisco" for product "Firepower 4125" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4140 Search vendor "Cisco" for product "Firepower 4140" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4145 Search vendor "Cisco" for product "Firepower 4145" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4150 Search vendor "Cisco" for product "Firepower 4150" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-24 Search vendor "Cisco" for product "Firepower 9300 Sm-24" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-36 Search vendor "Cisco" for product "Firepower 9300 Sm-36" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-40 Search vendor "Cisco" for product "Firepower 9300 Sm-40" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-44 Search vendor "Cisco" for product "Firepower 9300 Sm-44" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-44 X 3 Search vendor "Cisco" for product "Firepower 9300 Sm-44 X 3" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-48 Search vendor "Cisco" for product "Firepower 9300 Sm-48" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-56 Search vendor "Cisco" for product "Firepower 9300 Sm-56" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.3 < 2.3.1.144 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.3 < 2.3.1.144" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-56 X 3 Search vendor "Cisco" for product "Firepower 9300 Sm-56 X 3" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4110 Search vendor "Cisco" for product "Firepower 4110" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4115 Search vendor "Cisco" for product "Firepower 4115" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4120 Search vendor "Cisco" for product "Firepower 4120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4125 Search vendor "Cisco" for product "Firepower 4125" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4140 Search vendor "Cisco" for product "Firepower 4140" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4145 Search vendor "Cisco" for product "Firepower 4145" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4150 Search vendor "Cisco" for product "Firepower 4150" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-24 Search vendor "Cisco" for product "Firepower 9300 Sm-24" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-36 Search vendor "Cisco" for product "Firepower 9300 Sm-36" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-40 Search vendor "Cisco" for product "Firepower 9300 Sm-40" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-44 Search vendor "Cisco" for product "Firepower 9300 Sm-44" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-44 X 3 Search vendor "Cisco" for product "Firepower 9300 Sm-44 X 3" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-48 Search vendor "Cisco" for product "Firepower 9300 Sm-48" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-56 Search vendor "Cisco" for product "Firepower 9300 Sm-56" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | >= 2.4 < 2.4.1.234 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version " >= 2.4 < 2.4.1.234" | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-56 X 3 Search vendor "Cisco" for product "Firepower 9300 Sm-56 X 3" | - | - |
Safe
|