CVE-2021-34756
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information, see the Details section of the advisory.
Risk Assessment
Risk of complete device compromise by a privileged attacker, potentially leading to network integrity breach.
Recommendation
Update FTD software to the latest patched version. Restrict CLI access and apply least privilege principle.
Original NVD description (English source)
Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory.