Lucene search

CiscoCISCO-SA-FTD-SHELL-9RHJF68K

HistoryMay 06, 2020 - 4:00 p.m.

Cisco Firepower Threat Defense Software Shell Access Vulnerability

2020-05-0616:00:00

tools.cisco.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

A vulnerability in the support tunnel feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access the shell of an affected device even though expert mode is disabled.

The vulnerability is due to improper configuration of the support tunnel feature. An attacker could exploit this vulnerability by enabling the support tunnel, setting a key, and deriving the tunnel password. A successful exploit could allow the attacker to run any system command with root access on an affected device.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-shell-9rhJF68K [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-shell-9rhJF68K”]

Affected configurations

Vulners

Node

ciscofirepower_threat_defense_softwareMatch6.0

ciscofirepower_threat_defense_softwareMatch5.3

ciscofirepower_threat_defense_softwareMatch5.4

ciscofirepower_threat_defense_softwareMatch6.1

ciscofirepower_threat_defense_softwareMatch6.2

ciscofirepower_threat_defense_softwareMatch6.3

ciscofirepower_threat_defense_softwareMatch6.4

ciscofirepower_threat_defense_softwareMatchany

ciscofirepower_threat_defense_softwareMatch6.0.0

ciscofirepower_threat_defense_softwareMatch6.0.1

ciscofirepower_threat_defense_softwareMatch6.0.1.3

ciscofirepower_threat_defense_softwareMatch6.0.1.1

ciscofirepower_threat_defense_softwareMatch6.0.1.2

ciscofirepower_threat_defense_softwareMatch6.0.1.4

ciscofirepower_threat_defense_softwareMatch6.0.0.1

ciscofirepower_threat_defense_softwareMatch5.3.0

ciscofirepower_threat_defense_softwareMatch5.4.0

ciscofirepower_threat_defense_softwareMatch6.1.0

ciscofirepower_threat_defense_softwareMatch6.1.0.2

ciscofirepower_threat_defense_softwareMatch6.1.0.1

ciscofirepower_threat_defense_softwareMatch6.1.0.3

ciscofirepower_threat_defense_softwareMatch6.1.0.4

ciscofirepower_threat_defense_softwareMatch6.1.0.5

ciscofirepower_threat_defense_softwareMatch6.1.0.6

ciscofirepower_threat_defense_softwareMatch6.1.0.7

ciscofirepower_threat_defense_softwareMatch6.2.0

ciscofirepower_threat_defense_softwareMatch6.2.1

ciscofirepower_threat_defense_softwareMatch6.2.2

ciscofirepower_threat_defense_softwareMatch6.2.0.1

ciscofirepower_threat_defense_softwareMatch6.2.0.2

ciscofirepower_threat_defense_softwareMatch6.2.0.3

ciscofirepower_threat_defense_softwareMatch6.2.0.4

ciscofirepower_threat_defense_softwareMatch6.2.2.1

ciscofirepower_threat_defense_softwareMatch6.2.2.2

ciscofirepower_threat_defense_softwareMatch6.2.3

ciscofirepower_threat_defense_softwareMatch6.2.3.1

ciscofirepower_threat_defense_softwareMatch6.2.3.2

ciscofirepower_threat_defense_softwareMatch6.2.3.3

ciscofirepower_threat_defense_softwareMatch6.2.3.4

ciscofirepower_threat_defense_softwareMatch6.2.3.5

ciscofirepower_threat_defense_softwareMatch6.2.2.3

ciscofirepower_threat_defense_softwareMatch6.2.2.4

ciscofirepower_threat_defense_softwareMatch6.2.0.5

ciscofirepower_threat_defense_softwareMatch6.2.0.6

ciscofirepower_threat_defense_softwareMatch6.2.3.6

ciscofirepower_threat_defense_softwareMatch6.2.0.7

ciscofirepower_threat_defense_softwareMatch6.2.2.5

ciscofirepower_threat_defense_softwareMatch6.2.3.7

ciscofirepower_threat_defense_softwareMatch6.2.3.8

ciscofirepower_threat_defense_softwareMatch6.2.3.10

ciscofirepower_threat_defense_softwareMatch6.2.3.11

ciscofirepower_threat_defense_softwareMatch6.2.3.9

ciscofirepower_threat_defense_softwareMatch6.2.3.12

ciscofirepower_threat_defense_softwareMatch6.2.3.13

ciscofirepower_threat_defense_softwareMatch6.2.3.14

ciscofirepower_threat_defense_softwareMatch6.2.3.15

ciscofirepower_threat_defense_softwareMatch6.3.0

ciscofirepower_threat_defense_softwareMatch6.3.0.1

ciscofirepower_threat_defense_softwareMatch6.3.0.2

ciscofirepower_threat_defense_softwareMatch6.3.0.3

ciscofirepower_threat_defense_softwareMatch6.3.0.4

ciscofirepower_threat_defense_softwareMatch6.3.0.5

ciscofirepower_threat_defense_softwareMatch6.4.0

ciscofirepower_threat_defense_softwareMatch6.4.0.1

ciscofirepower_threat_defense_softwareMatch6.4.0.3

ciscofirepower_threat_defense_softwareMatch6.4.0.2

ciscofirepower_threat_defense_softwareMatch6.4.0.4

ciscofirepower_threat_defense_softwareMatch6.4.0.5

ciscofirepower_threat_defense_softwareMatch6.4.0.6

ciscofirepower_threat_defense_softwareMatch6.4.0.7

ciscofirepower_threat_defense_softwareMatch6.4.0.8

ciscofirepower_threat_defense_softwareMatchany

CPENameOperatorVersion
cisco firepower threat defense softwareeq6.0
cisco firepower threat defense softwareeq5.3
cisco firepower threat defense softwareeq5.4
cisco firepower threat defense softwareeq6.1
cisco firepower threat defense softwareeq6.2
cisco firepower threat defense softwareeq6.3
cisco firepower threat defense softwareeq6.4
cisco firepower threat defense softwareeqany
cisco firepower threat defense softwareeq6.0.0
cisco firepower threat defense softwareeq6.0.1

Name	Operator	Version
cisco firepower threat defense software	eq	6.0
cisco firepower threat defense software	eq	5.3
cisco firepower threat defense software	eq	5.4
cisco firepower threat defense software	eq	6.1
cisco firepower threat defense software	eq	6.2
cisco firepower threat defense software	eq	6.3
cisco firepower threat defense software	eq	6.4
cisco firepower threat defense software	eq	any
cisco firepower threat defense software	eq	6.0.0
cisco firepower threat defense software	eq	6.0.1