CVE-2020-3169 is a command injection vulnerability in the CLI of Cisco FXOS Software, allowing an authenticated, local attacker to execute arbitrary commands with root privileges on the underlying Linux operating system. The vulnerability stems from insufficient validation of arguments passed to a specific CLI command. With a CVSS score of 6.7 (MEDIUM), exploitation requires valid administrator credentials and local access, but successful execution grants full control over the system. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 2.2, < 2.2.2.97CPE matchmatch criteria | cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:* | ||
>= 2.3, < 2.3.1.144CPE matchmatch criteria | cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:* | ||
>= 2.4, < 2.4.1.234CPE matchmatch criteria | cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.