cisco-sa-20191002-ftd-cmdinj: Cisco Firepower Threat Defense Software Command Injection Vulnerability
First published: Wed Oct 02 2019(Updated: )
The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by executing a specific CLI command that includes crafted arguments. A successful exploit could allow the attacker to execute commands on the underlying OS with root privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ftd-cmdinj
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco FTD Software | >=Earlier than 6.1.0=6.1.0=6.2.0=6.2.1=6.2.2=6.2.3<=6.3.0<6.3.0.5 (end of October 2019) | 6.3.0.5 (end of October 2019) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20191002-ftd-cmdinj?
The cisco-sa-20191002-ftd-cmdinj vulnerability is considered high severity due to its potential to allow unauthorized command execution with root privileges.
How do I fix cisco-sa-20191002-ftd-cmdinj?
To fix cisco-sa-20191002-ftd-cmdinj, upgrade the Cisco FTD Software to a version later than 6.3.0.5.
What versions of Cisco FTD Software are affected by cisco-sa-20191002-ftd-cmdinj?
Cisco FTD Software versions earlier than 6.1.0, 6.1.0, 6.2.0, 6.2.1, 6.2.2, 6.2.3, and up to 6.3.0 are affected by cisco-sa-20191002-ftd-cmdinj.
What type of attack can exploit cisco-sa-20191002-ftd-cmdinj?
An attacker can exploit cisco-sa-20191002-ftd-cmdinj by executing a specifically crafted command that includes malicious arguments.
What are the potential impacts of cisco-sa-20191002-ftd-cmdinj?
The potential impact of cisco-sa-20191002-ftd-cmdinj includes unauthorized access and execution of commands on the underlying operating system with root privileges.
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/weakness
- agent/title
- agent/severity
- agent/references
- agent/tags
- agent/description
- agent/event
- agent/source
- vendor/cisco
- canonical/cisco ftd software
- version/cisco ftd software/earlier than 6.1.0
- version/cisco ftd software/6.1.0
- version/cisco ftd software/6.2.0
- version/cisco ftd software/6.2.1
- version/cisco ftd software/6.2.2
- version/cisco ftd software/6.2.3
- version/cisco ftd software/6.3.0