CVE-2022-20865
Cisco FXOS Software Command Injection Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The attacker would need to have Administrator privileges on the device. This vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to execute commands on the underlying operating system with root privileges.
Una vulnerabilidad en la CLI del software Cisco FXOS podría permitir a un atacante local autenticado inyectar comandos arbitrarios que son ejecutados con privilegios de root. El atacante necesitaría tener privilegios de administrador en el dispositivo. Esta vulnerabilidad es debido a una comprobación de entrada insuficiente de los comandos suministrados por el usuario. Un atacante podría explotar esta vulnerabilidad al autenticarse en un dispositivo y enviando una entrada diseñada para el comando afectado. Una explotación con éxito podría permitir al atacante ejecutar comandos en el sistema operativo subyacente con privilegios de root.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2021-11-02 CVE Reserved
- 2022-08-25 CVE Published
- 2023-03-08 EPSS Updated
- 2024-11-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Firepower 4110 Firmware Search vendor "Cisco" for product "Firepower 4110 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4110 Search vendor "Cisco" for product "Firepower 4110" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Firepower 4112 Firmware Search vendor "Cisco" for product "Firepower 4112 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4112 Search vendor "Cisco" for product "Firepower 4112" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Firepower 4115 Firmware Search vendor "Cisco" for product "Firepower 4115 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4115 Search vendor "Cisco" for product "Firepower 4115" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Firepower 4120 Firmware Search vendor "Cisco" for product "Firepower 4120 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4120 Search vendor "Cisco" for product "Firepower 4120" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Firepower 4125 Firmware Search vendor "Cisco" for product "Firepower 4125 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4125 Search vendor "Cisco" for product "Firepower 4125" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Firepower 4140 Firmware Search vendor "Cisco" for product "Firepower 4140 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4140 Search vendor "Cisco" for product "Firepower 4140" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Firepower 4145 Firmware Search vendor "Cisco" for product "Firepower 4145 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4145 Search vendor "Cisco" for product "Firepower 4145" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Firepower 4150 Firmware Search vendor "Cisco" for product "Firepower 4150 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 4150 Search vendor "Cisco" for product "Firepower 4150" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Firepower 9300 Sm-40 Firmware Search vendor "Cisco" for product "Firepower 9300 Sm-40 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-40 Search vendor "Cisco" for product "Firepower 9300 Sm-40" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Firepower 9300 Sm-48 Firmware Search vendor "Cisco" for product "Firepower 9300 Sm-48 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-48 Search vendor "Cisco" for product "Firepower 9300 Sm-48" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Firepower 9300 Sm-56 Firmware Search vendor "Cisco" for product "Firepower 9300 Sm-56 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-56 Search vendor "Cisco" for product "Firepower 9300 Sm-56" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Firepower 9300 Sm-56 X 3 Firmware Search vendor "Cisco" for product "Firepower 9300 Sm-56 X 3 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Firepower 9300 Sm-56 X 3 Search vendor "Cisco" for product "Firepower 9300 Sm-56 X 3" | - | - |
Safe
|