Lucene search

CVE-2022-20828

🗓️ 24 Jun 2022 16:08:15Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 86 Views🌐 6 Media mentions

A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER module as the root user. This vulnerability is due to improper handling of undefined command parameters

Reporter	Title	Published	Views	Family All 13
Packet Storm	Cisco ASA-X With FirePOWER Services Authenticated Command Injection	5 Sep 202200:00	–	packetstorm
Prion	Design/Logic Flaw	24 Jun 202216:15	–	prion
Metasploit	Cisco ASA-X with FirePOWER Services Authenticated Command Injection	19 Aug 202219:29	–	metasploit
Cisco	Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability	22 Jun 202216:00	–	cisco
Check Point Advisories	Cisco Firepower ASA Command Injection (CVE-2022-20828)	7 Nov 202200:00	–	checkpoint_advisories
Vulnrichment	CVE-2022-20828 Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability	24 Jun 202215:25	–	vulnrichment
NVD	CVE-2022-20828	24 Jun 202216:15	–	nvd
0day.today	Cisco ASA-X With FirePOWER Services Authenticated Command Injection Exploit	5 Sep 202200:00	–	zdt
Cvelist	CVE-2022-20828 Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability	24 Jun 202215:25	–	cvelist
Rapid7 Blog	Metasploit Weekly Wrap-Up	9 Sep 202219:43	–	rapid7blog

Nvd

Node

cisco asa_firepowerRange<6.2.3.19

cisco asa_firepowerRange6.3.0–6.4.0.15

cisco asa_firepowerRange6.5.0–6.6.7

cisco asa_firepowerRange6.7.0–7.0.2.1

AND

cisco firepower_1010Match-

cisco firepower_1120Match-

cisco firepower_1140Match-

cisco firepower_1150Match-

cisco firepower_2110Match-

cisco firepower_2120Match-

cisco firepower_2130Match-

cisco firepower_2140Match-

cisco firepower_4110Match-

cisco firepower_4112Match-

cisco firepower_4115Match-

cisco firepower_4120Match-

cisco firepower_4125Match-

cisco firepower_4140Match-

cisco firepower_4145Match-

cisco firepower_4150Match-

cisco firepower_9300Match-

cisco firepower_management_centerMatch-

cisco firepower_management_center_virtual_applianceMatch-

[
  {
    "product": "Cisco FirePOWER Services Software for ASA",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
rapid7	www.rapid7.com/blog/post/2022/08/11/rapid7-discovered-vulnerabilities-in-cisco-asa-asdm-and-firepower-services-software/
packetstormsecurity	www.packetstormsecurity.com/files/168256/Cisco-ASA-X-With-FirePOWER-Services-Authenticated-Command-Injection.html
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asasfr-cmd-inject-PE4GfdG

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Jun 2022 16:15Current

7.3High risk

Vulners AI Score7.3

CVSS29

CVSS36.5 - 7.2

EPSS0.117

SSVC

CWE-236