CVE-2019-12694
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) could allow an authenticated, local attacker with administrative privileges to execute commands on the underlying OS with root privileges. This is due to insufficient input validation.
Risk Assessment
An attacker with admin privileges could gain full control over the device's OS, potentially leading to complete compromise.
Recommendation
Restrict CLI access to trusted administrators and apply Cisco updates that address this vulnerability.
Original NVD description (English source)
A vulnerability in the command line interface (CLI) of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker with administrative privileges to execute commands on the underlying operating system with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by executing a specific CLI command that includes crafted arguments. A successful exploit could allow the attacker to execute commands on the underlying OS with root privileges.