cisco-sa-asaftd-cmd-inj-ZJV8Wysm: Cisco Adaptive Security Appliance and Firepower Threat Defense Software Command Injection Vulnerability
First published: Wed Apr 24 2024(Updated: )
A vulnerability in the Cisco Adaptive Security Appliance (ASA) restore functionality that is available in Cisco ASA Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Adaptive Security Appliance Software | ||
| Cisco Firepower Threat Defense |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-asaftd-cmd-inj-ZJV8Wysm?
The severity of cisco-sa-asaftd-cmd-inj-ZJV8Wysm is rated as high due to the potential for unauthorized command execution.
How do I fix cisco-sa-asaftd-cmd-inj-ZJV8Wysm?
To fix cisco-sa-asaftd-cmd-inj-ZJV8Wysm, update your Cisco Adaptive Security Appliance and Firepower Threat Defense software to the latest patched versions.
Who is affected by cisco-sa-asaftd-cmd-inj-ZJV8Wysm?
cisco-sa-asaftd-cmd-inj-ZJV8Wysm affects users of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense Software.
What type of attacker can exploit cisco-sa-asaftd-cmd-inj-ZJV8Wysm?
An authenticated local attacker can exploit cisco-sa-asaftd-cmd-inj-ZJV8Wysm to execute arbitrary commands.
What is the potential impact of cisco-sa-asaftd-cmd-inj-ZJV8Wysm?
The potential impact of cisco-sa-asaftd-cmd-inj-ZJV8Wysm includes unauthorized access and control over the underlying operating system.
- collector/cisco-recent
- source/Cisco
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/severity
- agent/title
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco adaptive security appliance software
- canonical/cisco firepower threat defense