CVE-2020-3253: Cisco Firepower Threat Defense Software Shell Access Vulnerability
A vulnerability in the support tunnel feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access the shell of an affected device even though expert mode is disabled. The vulnerability is due to improper configuration of the support tunnel feature. An attacker could exploit this vulnerability by enabling the support tunnel, setting a key, and deriving the tunnel password. A successful exploit could allow the attacker to run any system command with root access on an affected device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3253?
CVE-2020-3253 has a CVSS score that indicates a medium severity level.
How do I fix CVE-2020-3253?
To fix CVE-2020-3253, update your Cisco Firepower Threat Defense software to a version that addresses this vulnerability.
What is the impact of CVE-2020-3253?
The impact of CVE-2020-3253 allows an authenticated attacker to access the shell of the device even with expert mode disabled.
Who is affected by CVE-2020-3253?
Organizations using Cisco Firepower Threat Defense software versions prior to 6.5.0 are affected by CVE-2020-3253.
Is CVE-2020-3253 exploitable remotely?
CVE-2020-3253 requires local access for exploitation and cannot be exploited remotely.