PT-2020-4455 · Cisco · Cisco Ftd

Published 2020-10-21 · Updated 2020-10-23 · CVE-2020-3352

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description: The issue is related to the presence of undocumented configuration commands in the CLI of Cisco Firepower Threat Defense Software. An authenticated, local attacker could exploit this by performing specific steps to access hidden commands, potentially allowing them to make configuration changes to various sections of an affected device that should not be exposed to CLI access.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Hidden Functionality

Weakness Enumeration

CWE-912

Related Identifiers

BDU:2020-05003

CVE-2020-3352

Affected Products

Cisco Ftd

References · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-hidcmd-pFDeWVBd · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3352 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3352 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05003 · Security Note