VDB
CVE-2022-20865
CVE-2022-20865
PUBLISHED
CVSS 6.699999809265137 MEDIUM
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The attacker would need to have Administrator privileges on the device. This vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to execute commands on the underlying operating system with root privileges.
EPSS 0.34% · 27.1th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.34%
27.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | firepower_4120_firmware | |
| cisco | firepower_9300_sm-56_x_3_firmware | |
| cisco | firepower_4150_firmware | |
| cisco | firepower_9300_sm-48_firmware | |
| cisco | firepower_4145_firmware | |
| cisco | firepower_4110_firmware | |
| cisco | firepower_4125_firmware | |
| cisco | firepower_4112_firmware | |
| cisco | firepower_9300_sm-56_firmware | |
| cisco | firepower_9300_sm-40_firmware | |
| Cisco | Cisco Firepower Extensible Operating System (FXOS) | * |
| cisco | firepower_4140_firmware | |
| cisco | firepower_4115_firmware |
Timeline
- Aug 25, 2022 CVE Published
- Aug 26, 2022 EPSS Score
- Oct 11, 2022 EPSS Score
- Nov 26, 2022 EPSS Score
- Jan 10, 2023 EPSS Score
- Feb 25, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 12, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 13, 2023 EPSS Score
- Aug 27, 2023 EPSS Score
- Oct 12, 2023 EPSS Score