1. Home
  2. CVE Database
  3. CVE-2023-20234
MEDIUM · 4.4

CVE-2023-20234

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system files. ...

Vulnerability Description

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system files. The vulnerability occurs because there is no validation of parameters when a specific CLI command is used. An attacker could exploit this vulnerability by authenticating to an affected device and using the command at the CLI. A successful exploit could allow the attacker to overwrite any file on the disk of the affected device, including system files. The attacker must have valid administrative credentials on the affected device to exploit this vulnerability.

CVSS Score

4.4

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
CiscoFirepower Extensible Operating System-
CiscoFirepower 1000-
CiscoFirepower 1010-
CiscoFirepower 1020-
CiscoFirepower 1030-
CiscoFirepower 1040-
CiscoFirepower 2100-
CiscoFirepower 2110-
CiscoFirepower 2120-
CiscoFirepower 2130-
CiscoFirepower 2140-
CiscoFirepower 4100-
CiscoFirepower 4110-
CiscoFirepower 4110 Next-Generation Firewall-
CiscoFirepower 4112-
CiscoFirepower 4115-
CiscoFirepower 4120-
CiscoFirepower 4120 Next-Generation Firewall-
CiscoFirepower 4125-
CiscoFirepower 4140-

Related Weaknesses (CWE)

CWE-732CWE-73

References

FAQ

What is CVE-2023-20234?

CVE-2023-20234 is a vulnerability with a CVSS score of 4.4 (MEDIUM). A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system files. ...

How severe is CVE-2023-20234?

CVE-2023-20234 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-20234?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Firepower Extensible Operating System, Cisco Firepower 1000, Cisco Firepower 1010, Cisco Firepower 1020, Cisco Firepower 1030.