CVE-2019-1709
A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting commands into arguments for a specific command. A successful exploit could allow the attacker to execute commands with root privileges.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - psirt@cisco.com
- Published
- 2019-05-03
- Last modified
- 2024-11-21
- Weaknesses
- CWE-78
Affected products
- Cisco Firepower Threat Defense Software (Cisco)
- Secure Firewall Management Center (Cisco)
- Secure Firewall Threat Defense (Cisco)
References
- http://www.securityfocus.com/bid/108156
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-frpwr-cmd-inj
