PT-2020-2504 · Cisco · Cisco Ftd

Published 2020-05-06 · Updated 2020-05-12 · CVE-2020-3253

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the support tunnel feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access the shell of an affected device even though expert mode is disabled. The issue is due to improper configuration of the support tunnel feature. An attacker could exploit this by enabling the support tunnel, setting a key, and deriving the tunnel password, potentially allowing them to run any system command with root access on an affected device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2020-02515

CVE-2020-3253

Affected Products

Cisco Ftd

References · 5

• https://bdu.fstec.ru/vul/2020-02515 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-3253 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-shell-9rhJF68K · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3253 · Vendor Advisory
• https://t.me/cvenotify/3588 · Telegram Post