CVE Published: 26/02/2020 |
CVE Updated: 15/11/2024 |
CVE Year: 2020 Source: cisco |
Vendor: Cisco |
Product: Cisco Firepower Extensible Operating System (FXOS) Status : PUBLISHED
CVE-2020-3169 Description
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root on an affected device. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. An attacker would need valid administrator credentials to exploit this vulnerability.