A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access hidden commands. The vulnerability is due to the presence of undocumented configuration commands. An attacker could exploit this vulnerability by performing specific steps that make the hidden commands accessible. A successful exploit could allow the attacker to make configuration changes to various sections of an affected device that should not be exposed to CLI access.
References
Link | Resource |
---|---|
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-hidcmd-pFDeWVBd | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: cisco
Published: 2020-10-21T00:00:00
Updated: 2020-10-21T18:36:38
Reserved: 2019-12-12T00:00:00
Link: CVE-2020-3352
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-10-21T19:15:15.810
Modified: 2020-10-23T17:59:45.197
Link: CVE-2020-3352
JSON object: View
Redhat Information
No data.
CWE