PT-2022-5808 · Cisco · Cisco Ftd+1

Brandon Sakai · Published 2022-11-09 · Updated 2024-01-25 · CVE-2022-20934

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified) Cisco FXOS Software (affected versions not specified)

Description A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This issue is due to improper input validation for specific CLI commands, allowing an attacker to inject operating system commands into a legitimate command and potentially escape the restricted command prompt. To exploit this, an attacker would need valid Administrator credentials.

Recommendations For Cisco Firepower Threat Defense (FTD) Software, update to a version that includes the fix for this issue. For Cisco FXOS Software, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the CLI to minimize the risk of exploitation.

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2022-07213

CVE-2022-20934

Affected Products

Cisco Fxos

Cisco Ftd

References · 5

• https://bdu.fstec.ru/vul/2022-07213 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-20934 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-fxos-cmd-inj-Q9bLNsrK · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-20934 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-fxos-cmd-inj-Q9bLNsrK · Note