CVE-2019-12699
High
Description
Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute commands on the underlying operating system (OS) with root privileges. These vulnerabilities are due to insufficient input validation. An attacker could exploit these vulnerabilities by including crafted arguments to specific CLI commands. A successful exploit could allow the attacker to execute commands on the underlying OS with root privileges.
SeverityHigh
CVSS7.8
Exploit probability60. percentile0.9%
Product
Cisco Firepower 9300 Firmware
PublishedOct 2, 2019
First seenOct 2, 2019
Weakness typeCWE-20Improper input validation
How to fix
Update
- cisco secure_firewall_threat_defense6.2.3.14, 6.3.0.3 or later
- cisco firepower_extensible_operating_system2.2.2.101, 2.3.1.155, 2.4.1.238 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco firepower_9300_firmware | 2.4\(1.214\), 2.4\(1.216\), 2.4\(2.54\), r241 | — |
| cisco secure_firewall_threat_defense | v ≤ 6.1.0, 6.2.0 ≤ v < 6.2.3.14, 6.3.0 ≤ v < 6.3.0.3 | 6.2.3.14, 6.3.0.3 |
| cisco firepower_extensible_operating_system | 2.0 ≤ v < 2.2.2.101, 2.3 ≤ v < 2.3.1.155, 2.4 ≤ v < 2.4.1.238 | 2.2.2.101, 2.3.1.155, 2.4.1.238 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.