Cisco ASA/FTD FXOS CLI Root Privilege Escalation Vulnerability

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Type: FXOS CLI Root Privilege Escalation Vulnerability - Affected Products: Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software - Affected Hardware Platforms: Firepower 1000 Series, Firepower 2100 Series, Secure Firewall 3100, Secure Firewall 4200 - Exploitation: Attackers can exploit this vulnerability by performing a series of steps, including downloading malicious system files and accessing the Cisco FXOS CLI. 2. Remediation: - Released Software Updates: Cisco has released software updates to fix this vulnerability. - Workarounds: No workarounds are available to address this vulnerability. 3. Affected Products: - Confirmed Affected Products: Cisco ASA Software and FTD Software - Confirmed Unaffected Products: Cisco Secure Firewall Management Center (FMC) Software 4. Affected Software Versions: - Affected Software Versions: 9.16.2.11 and 6.6.7 5. Exploitation: - Exploitation Method: Attackers must perform a series of steps on the device, including downloading malicious system files and accessing the Cisco FXOS CLI. 6. Resources: - Cisco Software Checker: Used to determine if a device is exposed to vulnerabilities in specific software versions. - Cisco ASA Compatibility, Cisco Secure Firewall ASA Upgrade Guide, and Cisco Secure Firewall Threat Defense Compatibility Guide: Provide information on compatibility for Cisco ASA and FTD software. 7. Source: - Discoverer: Ilkin Gasimov - Discovery Method: Internal security testing 8. Legal Disclaimer: - Disclaimer: The document is provided "AS IS" without any warranty or guarantee, including but not limited to merchantability or fitness for a particular purpose. This information helps users understand the vulnerability details, affected products and software versions, and how to remediate and prevent exploitation.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco ASA/FTD FXOS CLI Root Privilege Escalation Vulnerability