UpHeron
All vulnerabilities

Servers and applications

CVE-2020-3457

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful…

Severity
Medium 6.7
Published
21 Oct 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
6.5.0.5, 9.8.4.29, 9.9.2.80, 9.10.1.40, 9.12.4.3, 9.13.1.13
Sources
NVD

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • From 9.8 before 9.8.4.29
  • From 9.9 before 9.9.2.80
  • From 9.10 before 9.10.1.40
  • From 9.12 before 9.12.4.3
  • From 9.13 before 9.13.1.13
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:firepower_threat_defense
  • From 6.2.2 before 6.3.0.6
  • From 6.4.0 before 6.4.0.9
  • From 6.5.0 before 6.5.0.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-3457
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-3457