PT-2019-3618 · Cisco · Cisco Ftd

Published 2019-10-02 · Updated 2019-10-10 · CVE-2019-12694

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense Software (affected versions not specified)

Description The issue is related to insufficient input validation in the command line interface (CLI) of the software. This could allow an authenticated, local attacker with administrative privileges to execute commands on the underlying operating system with root privileges. The attacker could exploit this by executing a specific CLI command that includes crafted arguments, potentially allowing them to execute commands on the underlying OS with root privileges.

Recommendations For all affected versions, consider restricting access to the CLI to minimize the risk of exploitation until a patch is available. As a temporary workaround, consider limiting the use of administrative privileges for the CLI until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-03833

CVE-2019-12694

Affected Products

Cisco Ftd

References · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-ftd-cmdinj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12694 · Security Note
• https://osv.dev/vulnerability/CVE-2019-12694 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03833 · Security Note