CVE-2020-3169— Cisco FXOS Software CLI Command Injection Vulnerability

Cisco FXOS Software CLI Command Injection Vulnerability

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root on an affected device. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. An attacker would need valid administrator credentials to exploit this vulnerability.

N/A

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Cisco Firepower 4100 Series和Firepower 9300 Security Appliances FXOS Software 操作系统命令注入漏洞

Cisco Firepower 4100 Series和Cisco Firepower 9300 Security Appliance都是美国思科（Cisco）公司的产品。Cisco Firepower 9300 Security Appliance是一款9300系列的安全设备。Cisco FXOS Software是一套运行在思科安全设备中的防火墙软件。Cisco Firepower 9300 Security Appliance是一款9300系列的安全设备。Cisco Firepower 4100 S

N/A

N/A