CVE-2019-12699— Cisco FXOS Software and Firepower Threat Defense Software Command Injection Vulnerabilities
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-12699
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco FXOS Software and Firepower Threat Defense Software Command Injection Vulnerabilities
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute commands on the underlying operating system (OS) with root privileges. These vulnerabilities are due to insufficient input validation. An attacker could exploit these vulnerabilities by including crafted arguments to specific CLI commands. A successful exploit could allow the attacker to execute commands on the underlying OS with root privileges.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
输入验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Firepower Threat Defense和Cisco FXOS Software 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco FXOS Software和Cisco FTD中的CLI存在输入验证错误漏洞。本地攻击者可借助特制的参数利用该漏洞以root权限在底层操作系统上执行命令。以下产品及版本受到影响：Cisco Firepower 1000 Series Appliances；Cisco Firepower 2100 Series Appliances；Cisco Firepower 4100 Series Appliances；Cisco Firepower 9300 Series Appliances。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Firepower Extensible Operating System (FXOS) | unspecified ~ n/a | - |
II. Public POCs for CVE-2019-12699
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-12699
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fxos-cmd-injectvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2019-12699
Same Patch Batch · Cisco · 2019-10-02 · 43 CVEs total
| CVE-2019-12679 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12693 | Cisco Adaptive Security Appliance Software Secure Copy Denial of Service Vulnerability | |
| CVE-2019-12677 | Cisco Adaptive Security Appliance Software SSL VPN Denial of Service Vulnerability | |
| CVE-2019-12681 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12678 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Inspe | |
| CVE-2019-12674 | Cisco Firepower Threat Defense Software Multi-instance Container Escape Vulnerabilities | |
| CVE-2019-12673 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspe | |
| CVE-2019-12631 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | |
| CVE-2019-12630 | Cisco Security Manager Java Deserialization Vulnerability | |
| CVE-2019-12676 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF LSA | |
| CVE-2019-12680 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12683 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12682 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12685 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12684 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12687 | Cisco Firepower Management Center Remote Code Execution Vulnerability | |
| CVE-2019-12686 | Cisco Firepower Management Center SQL Injection Vulnerabilities | |
| CVE-2019-12690 | Cisco Firepower Management Center Command Injection Vulnerability | |
| CVE-2019-12689 | Cisco Firepower Management Center Remote Code Execution Vulnerability | |
| CVE-2019-12688 | Cisco Firepower Management Center Remote Code Execution Vulnerability |
Showing top 20 of 43 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco Firepower Extensible Operating System (FXOS)
- CVE-2026-20099
Cisco UCS Manager and FXOS Software Command Injection Vulner - CVE-2026-20091
Cisco UCS Manager and FXOS Software Stored Cross-Site Script - CVE-2022-20865
Cisco FXOS Software Command Injection Vulnerability - CVE-2020-3455
Cisco FXOS Software for Firepower 4100/9300 Series Appliance - CVE-2020-3459
Cisco FXOS Software for Firepower 4100/9300 Series Command I
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-20
V. Comments for CVE-2019-12699
No comments yet