CVE-2019-12699: falha de alta gravidade em Cisco Firepower Extensible Operating System…
Cisco FXOS Software and Firepower Threat Defense Software Command Injection Vulnerabilities
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 0.9%
Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute commands on the underlying operating system (OS) with root privileges. These vulnerabilities are due to insufficient input validation. An attacker could exploit these vulnerabilities by including crafted arguments to specific CLI commands. A successful exploit could allow the attacker to execute commands on the underlying OS with root privileges.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco Firepower Extensible Operating System (FXOS)CVEs relacionadas — Cisco Firepower Extensible Operating System…
No mesmo produto, das mais perigosas para as menos.
CVE-2019-1858HIGHCisco FXOS and NX-OS Software Simple Network Management Protocol Denial of Service VulnerabilityEPSS 2.4%CVE-2026-20099MEDIUMCisco UCS Manager and FXOS Software Command Injection VulnerabilityEPSS 0.7%CVE-2023-20200HIGHCVE-2023-20200EPSS 0.7%CVE-2019-1700MEDIUMCisco Firepower 9000 Series Firepower 2-Port 100G Double-Width Network Module Queue Wedge Denial of Service VulnerabilityEPSS 0.5%CVE-2020-3169MEDIUMCisco FXOS Software CLI Command Injection VulnerabilityEPSS 0.4%CVE-2020-3545MEDIUMCisco FXOS Software Buffer Overflow VulnerabilityEPSS 0.4%