CVE-2020-3550

Published Oct 21, 2020

Last updated 4 years ago

CVSS high 8.1

Overview

Description: A vulnerability in the sfmgr daemon of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to perform directory traversal and access directories outside the restricted path. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a relative path in specific sfmgr commands. An exploit could allow the attacker to read or write arbitrary files on an sftunnel-connected peer device.
Source: ykramarz@cisco.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.1
Impact score: 5.2
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Severity: HIGH

CVSS 3.0

Type: Secondary
Base score: 8.1
Impact score: 5.2
Exploitability score: 2.8
Vector string: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 5.5
Impact score: 4.9
Exploitability score: 8
Vector string: AV:N/AC:L/Au:S/C:P/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-22
ykramarz@cisco.com: CWE-22

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F74A789B-7017-4BA0-B57F-BADA67D3F2FB",
            "versionEndIncluding": "6.0.1"
          },
          {
            "criteria": "cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7E57B5EF-7DB7-49B0-8883-2ABB1384DE4F",
            "versionEndExcluding": "6.3.0.6",
            "versionStartIncluding": "6.3.0"
          },
          {
            "criteria": "cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "10FCBC75-2799-4F5E-B210-0B6976AC9E0C",
            "versionEndExcluding": "6.4.0.10",
            "versionStartIncluding": "6.4.0"
          },
          {
            "criteria": "cpe:2.3:a:cisco:firepower_management_center:6.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9641FE9B-BC9F-472F-B53B-F4287EE2F17A"
          },
          {
            "criteria": "cpe:2.3:a:cisco:firepower_management_center:6.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1895BC03-A0B4-4AE8-8EB5-DAFC913E4B2B"
          },
          {
            "criteria": "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AD83F585-B278-44C6-92AE-5B1CF434B17D",
            "versionEndIncluding": "6.0.1"
          },
          {
            "criteria": "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9D27DE97-510A-4761-8184-6940745B54E2",
            "versionEndExcluding": "6.3.0.6",
            "versionStartIncluding": "6.3.0"
          },
          {
            "criteria": "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "53C69C8B-5A19-4613-8861-683CF21806B7",
            "versionEndExcluding": "6.4.0.10",
            "versionStartIncluding": "6.4.0"
          },
          {
            "criteria": "cpe:2.3:a:cisco:firepower_threat_defense:6.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1DC52A8B-7DF4-47B2-9F49-627F59656E5E"
          },
          {
            "criteria": "cpe:2.3:a:cisco:firepower_threat_defense:6.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AD48BE40-C647-429A-81B6-59E125BBE415"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

CVSS 3.0

CVSS 2.0

Weaknesses

Social media

Configurations

References