Vulnslist

find the latest Cisco vulnerabilities

Cisco Adaptive Security Appliance and Firepower Threat Defense Software FXOS CLI Root Privilege Escalation Vulnerability

cisco-sa-asa-ftd-priv-esc-hBS9gnwq · Medium · Published · Updated

A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to elevate their administrative privileges to root. The attacker would need valid administrative credentials on the device to exploit this vulnerability.    This vulnerability exists because certain system configurations and executable files have insecure storage and permissions. An attacker could exploit this vulnerability by authenticating on the device and then performing a series of steps that includes downloading malicious system files and accessing the Cisco FXOS CLI to configure the attack. A successful exploit could allow the attacker to obtain root access on the device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-priv-esc-hBS9gnwq This advisory is part of the October 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.

Cisco advisory · CSAF JSON

Workarounds

There are no workarounds that address this vulnerability.

CVEsCVE-2024-20370
Cisco Bug IDsCSCwi96562
CVSS ScoreBase 6.0
Base 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:X/RL:X/RC:X
Product Names From Source
Cisco Adaptive Security Appliance (ASA) Software 9.17.1, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.7, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.9, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.10, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.11, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.13, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.15, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.20, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.30, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.33, Cisco Adaptive Security Appliance (ASA) Software 9.17.1.39, Cisco Adaptive Security Appliance (ASA) Software 9.18.1, Cisco Adaptive Security Appliance (ASA) Software 9.18.1.3, Cisco Adaptive Security Appliance (ASA) Software 9.18.2, Cisco Adaptive Security Appliance (ASA) Software 9.18.2.5, Cisco Adaptive Security Appliance (ASA) Software 9.18.2.7, Cisco Adaptive Security Appliance (ASA) Software 9.18.2.8, Cisco Adaptive Security Appliance (ASA) Software 9.18.3, Cisco Adaptive Security Appliance (ASA) Software 9.18.3.39, Cisco Adaptive Security Appliance (ASA) Software 9.18.3.46, Cisco Adaptive Security Appliance (ASA) Software 9.18.3.53, Cisco Adaptive Security Appliance (ASA) Software 9.18.3.55, Cisco Adaptive Security Appliance (ASA) Software 9.18.3.56, Cisco Adaptive Security Appliance (ASA) Software 9.18.4, Cisco Adaptive Security Appliance (ASA) Software 9.18.4.5, Cisco Adaptive Security Appliance (ASA) Software 9.18.4.8, Cisco Adaptive Security Appliance (ASA) Software 9.18.4.22, Cisco Adaptive Security Appliance (ASA) Software 9.19.1, Cisco Adaptive Security Appliance (ASA) Software 9.19.1.5, Cisco Adaptive Security Appliance (ASA) Software 9.19.1.9, Cisco Adaptive Security Appliance (ASA) Software 9.19.1.12, Cisco Adaptive Security Appliance (ASA) Software 9.19.1.18, Cisco Adaptive Security Appliance (ASA) Software 9.19.1.22, Cisco Adaptive Security Appliance (ASA) Software 9.19.1.24, Cisco Adaptive Security Appliance (ASA) Software 9.19.1.27, Cisco Adaptive Security Appliance (ASA) Software 9.19.1.28, Cisco Adaptive Security Appliance (ASA) Software 9.20.1, Cisco Adaptive Security Appliance (ASA) Software 9.20.1.5, Cisco Adaptive Security Appliance (ASA) Software 9.20.2, Cisco Adaptive Security Appliance (ASA) Software 9.20.2.10, Cisco Firepower Threat Defense Software 7.1.0, Cisco Firepower Threat Defense Software 7.1.0.1, Cisco Firepower Threat Defense Software 7.1.0.2, Cisco Firepower Threat Defense Software 7.1.0.3, Cisco Firepower Threat Defense Software 7.2.0, Cisco Firepower Threat Defense Software 7.2.0.1, Cisco Firepower Threat Defense Software 7.2.1, Cisco Firepower Threat Defense Software 7.2.2, Cisco Firepower Threat Defense Software 7.2.3, Cisco Firepower Threat Defense Software 7.2.4, Cisco Firepower Threat Defense Software 7.2.4.1, Cisco Firepower Threat Defense Software 7.2.5, Cisco Firepower Threat Defense Software 7.2.5.1, Cisco Firepower Threat Defense Software 7.2.6, Cisco Firepower Threat Defense Software 7.2.7, Cisco Firepower Threat Defense Software 7.2.5.2, Cisco Firepower Threat Defense Software 7.2.8, Cisco Firepower Threat Defense Software 7.2.8.1, Cisco Firepower Threat Defense Software 7.3.0, Cisco Firepower Threat Defense Software 7.3.1, Cisco Firepower Threat Defense Software 7.3.1.1, Cisco Firepower Threat Defense Software 7.3.1.2, Cisco Firepower Threat Defense Software 7.4.0, Cisco Firepower Threat Defense Software 7.4.1, Cisco Firepower Threat Defense Software 7.4.1.1, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco Firepower 2100 Series, Cisco Firepower 1000 Series, Cisco Secure Firewall 3100 Series, Cisco Secure Firewall 4200 Series

Related Products

Product CVE Evidence
Cisco Secure Firewall Threat Defense (FTD) Software CVE-2024-20370 Cisco OpenVuln
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software CVE-2024-20370 Cisco OpenVuln
Cisco Secure Firewall 4200 Series CVE-2024-20370 Cisco OpenVuln
Cisco Secure Firewall 3100 Series CVE-2024-20370 Cisco OpenVuln
Cisco Firepower Threat Defense Software CVE-2024-20370 Cisco OpenVuln
Cisco Firepower 2100 Series CVE-2024-20370 Cisco OpenVuln
Cisco Firepower 1000 Series CVE-2024-20370 Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software CVE-2024-20370 Cisco OpenVuln