CVE-2020-3309: Cisco Firepower Device Manager On-Box Software Arbitrary File Overwrite Vulnerability
A vulnerability in Cisco Firepower Device Manager (FDM) On-Box software could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by uploading a malicious file to an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on as well as modify the underlying operating system of an affected device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3309?
CVE-2020-3309 is classified as a high severity vulnerability that allows file overwrite on an affected Cisco Firepower Device.
How do I fix CVE-2020-3309?
To fix CVE-2020-3309, update your Cisco Firepower Device Manager On-Box software to a version above 6.2.3.
Who is affected by CVE-2020-3309?
CVE-2020-3309 affects users of Cisco Firepower Device Manager On-Box software versions up to and including 6.2.3.
What are the potential consequences of exploiting CVE-2020-3309?
Exploitation of CVE-2020-3309 could allow an authenticated remote attacker to overwrite arbitrary files on the operating system, potentially leading to further system compromise.
Is authentication required to exploit CVE-2020-3309?
Yes, an attacker must be authenticated to exploit CVE-2020-3309.