CVE-2020-3169

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root on an affected device. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with root privileges. An attacker would need valid administrator credentials to exploit this vulnerability.

• cisco firepower extensible operating system (>= 2.2 < 2.2.2.97) • cisco firepower extensible operating system (>= 2.3 < 2.3.1.144) • cisco firepower extensible operating system (>= 2.4 < 2.4.1.234)