
Cloud Vulnerability DB
A community-led vulnerabilities database
A vulnerability (CVE-2023-20234) was discovered in the Command Line Interface (CLI) of Cisco FXOS Software. This vulnerability was disclosed on August 23, 2023, affecting multiple Cisco products including Firepower 1000 Series, Firepower 2100 Series, Firepower 4100 Series, Firepower 9300 Security Appliances, and Secure Firewall 3100 Series (Cisco Advisory).
The vulnerability stems from insufficient parameter validation in a specific CLI command. It has been assigned a CVSS Base Score of 4.4 (Medium) with the following vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N. The vulnerability requires local access and high privileges for exploitation, but requires no user interaction (NVD).
A successful exploitation of this vulnerability could allow an authenticated attacker to create or overwrite any file on the filesystem of an affected device, including critical system files. This could potentially lead to system compromise or disruption of services (Cisco Advisory).
Cisco has released software updates that address this vulnerability. There are no workarounds available that address this vulnerability. Organizations are advised to upgrade to a fixed version of the software (Cisco Advisory).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."