CVE-2020-3352: 
Cisco Firepower Threat Defense (FTD) vulnerability analysis and mitigation

A vulnerability in the Command Line Interface (CLI) of Cisco Firepower Threat Defense (FTD) Software was identified as CVE-2020-3352. This vulnerability allows an authenticated, local attacker to access hidden commands that should not be accessible through the CLI. The issue stems from the presence of undocumented configuration commands in the system (CISCO, NVD).

The vulnerability exists due to the presence of undocumented configuration commands in the Cisco FTD Software. An attacker with local access can perform specific steps to make these hidden commands accessible, potentially gaining unauthorized access to various configuration sections of the affected device that should be restricted from CLI access (MITRE).

A successful exploitation of this vulnerability could allow an authenticated attacker to make configuration changes to various sections of an affected device that should not be exposed to CLI access. This could potentially lead to unauthorized system modifications and compromise the security posture of the affected device (CISCO).

The vulnerability requires local access and authentication to exploit. The attacker must have valid credentials to access the CLI before attempting to access the hidden commands (MITRE).

Cisco has addressed this vulnerability through software updates. Organizations using affected versions of Cisco FTD Software should upgrade to a fixed version as recommended in the Cisco Security Advisory (CISCO).