Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
None
Privileges Required
High
Attack Vector
Local
0

CVE-2022-20934

Disclosure Date: November 15, 2022 •
CVE-2022-20934 CVSS v3 Base Score: 6.7
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root.

This vulnerability is due to improper input validation for specific CLI commands. An attacker could exploit this vulnerability by injecting operating system commands into a legitimate command. A successful exploit could allow the attacker to escape the restricted command prompt and execute arbitrary commands on the underlying operating system. To successfully exploit this vulnerability, an attacker would need valid Administrator credentials.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
6.7 Medium
Impact Score:
5.9
Exploitability Score:
0.8
Vector:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
High
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
High

General Information

Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
Cisco Firepower Threat Defense Software 6.2.3
Cisco Firepower Threat Defense Software 6.2.3.1
Cisco Firepower Threat Defense Software 6.2.3.2
Cisco Firepower Threat Defense Software 6.2.3.3
Cisco Firepower Threat Defense Software 6.2.3.4
Cisco Firepower Threat Defense Software 6.2.3.5
Cisco Firepower Threat Defense Software 6.2.3.6
Cisco Firepower Threat Defense Software 6.2.3.7
Cisco Firepower Threat Defense Software 6.2.3.8
Cisco Firepower Threat Defense Software 6.2.3.10
Cisco Firepower Threat Defense Software 6.2.3.11
Cisco Firepower Threat Defense Software 6.2.3.9
Cisco Firepower Threat Defense Software 6.2.3.12
Cisco Firepower Threat Defense Software 6.2.3.13
Cisco Firepower Threat Defense Software 6.2.3.14
Cisco Firepower Threat Defense Software 6.2.3.15
Cisco Firepower Threat Defense Software 6.2.3.16
Cisco Firepower Threat Defense Software 6.2.3.17
Cisco Firepower Threat Defense Software 6.2.3.18
Cisco Firepower Threat Defense Software 6.6.0
Cisco Firepower Threat Defense Software 6.6.0.1
Cisco Firepower Threat Defense Software 6.6.1
Cisco Firepower Threat Defense Software 6.6.3
Cisco Firepower Threat Defense Software 6.6.4
Cisco Firepower Threat Defense Software 6.6.5
Cisco Firepower Threat Defense Software 6.6.5.1
Cisco Firepower Threat Defense Software 6.6.5.2
Cisco Firepower Threat Defense Software 6.6.7
Cisco Firepower Threat Defense Software 6.4.0
Cisco Firepower Threat Defense Software 6.4.0.1
Cisco Firepower Threat Defense Software 6.4.0.3
Cisco Firepower Threat Defense Software 6.4.0.2
Cisco Firepower Threat Defense Software 6.4.0.4
Cisco Firepower Threat Defense Software 6.4.0.5
Cisco Firepower Threat Defense Software 6.4.0.6
Cisco Firepower Threat Defense Software 6.4.0.7
Cisco Firepower Threat Defense Software 6.4.0.8
Cisco Firepower Threat Defense Software 6.4.0.9
Cisco Firepower Threat Defense Software 6.4.0.10
Cisco Firepower Threat Defense Software 6.4.0.11
Cisco Firepower Threat Defense Software 6.4.0.12
Cisco Firepower Threat Defense Software 6.4.0.13
Cisco Firepower Threat Defense Software 6.4.0.14
Cisco Firepower Threat Defense Software 6.4.0.15
Cisco Firepower Threat Defense Software 6.7.0
Cisco Firepower Threat Defense Software 6.7.0.1
Cisco Firepower Threat Defense Software 6.7.0.2
Cisco Firepower Threat Defense Software 6.7.0.3
Cisco Firepower Threat Defense Software 7.0.0
Cisco Firepower Threat Defense Software 7.0.0.1
Cisco Firepower Threat Defense Software 7.0.1
Cisco Firepower Threat Defense Software 7.0.1.1
Cisco Firepower Threat Defense Software 7.0.2
Cisco Firepower Threat Defense Software 7.0.2.1
Cisco Firepower Threat Defense Software 7.0.3
Cisco Firepower Threat Defense Software 7.0.4
Cisco Firepower Threat Defense Software 7.1.0
Cisco Firepower Threat Defense Software 7.1.0.1
Cisco Firepower Threat Defense Software 7.1.0.2
Cisco Firepower Threat Defense Software 7.2.0
Cisco Firepower Threat Defense Software 7.2.0.1
Cisco Firepower Extensible Operating System (FXOS) 2.2.1.63
Cisco Firepower Extensible Operating System (FXOS) 2.2.1.66
Cisco Firepower Extensible Operating System (FXOS) 2.2.1.70
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.17
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.19
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.24
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.26
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.28
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.54
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.60
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.71
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.83
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.86
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.91
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.97
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.101
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.137
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.148
Cisco Firepower Extensible Operating System (FXOS) 2.2.2.149
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.99
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.93
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.91
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.88
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.75
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.73
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.66
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.58
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.130
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.111
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.110
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.144
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.145
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.155
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.166
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.173
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.179
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.180
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.56
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.190
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.215
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.216
Cisco Firepower Extensible Operating System (FXOS) 2.3.1.219
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.131
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.157
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.166
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.169
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.174
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.187
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.192
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.204
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.214
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.224
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.229
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.230
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.238
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.239
Cisco Firepower Extensible Operating System (FXOS) 2.6.1.254
Cisco Firepower Extensible Operating System (FXOS) 2.8.1.105
Cisco Firepower Extensible Operating System (FXOS) 2.8.1.125
Cisco Firepower Extensible Operating System (FXOS) 2.8.1.139
Cisco Firepower Extensible Operating System (FXOS) 2.8.1.143
Cisco Firepower Extensible Operating System (FXOS) 2.8.1.152
Cisco Firepower Extensible Operating System (FXOS) 2.8.1.162
Cisco Firepower Extensible Operating System (FXOS) 2.8.1.164
Cisco Firepower Extensible Operating System (FXOS) 2.8.1.172
Cisco Firepower Extensible Operating System (FXOS) 2.9.1.131
Cisco Firepower Extensible Operating System (FXOS) 2.9.1.135
Cisco Firepower Extensible Operating System (FXOS) 2.9.1.143
Cisco Firepower Extensible Operating System (FXOS) 2.9.1.150
Cisco Firepower Extensible Operating System (FXOS) 2.9.1.158
Cisco Firepower Extensible Operating System (FXOS) 2.10.1.159
Cisco Firepower Extensible Operating System (FXOS) 2.10.1.166
Cisco Firepower Extensible Operating System (FXOS) 2.10.1.179
Cisco Firepower Extensible Operating System (FXOS) 2.11.1.154
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown

Vendors

Products

Additional Info

Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Technical Analysis