A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system files.

The vulnerability occurs because there is no validation of parameters when a specific CLI command is used. An attacker could exploit this vulnerability by authenticating to an affected device and using the command at the CLI. A successful exploit could allow the attacker to overwrite any file on the disk of the affected device, including system files. The attacker must have valid administrative credentials on the affected device to exploit this vulnerability.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00019.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Cisco Cisco Adaptive Security Appliance (ASA) Software affected
Version Status Constraints
9.8.2 affected —
9.8.2.8 affected —
9.8.2.14 affected —
9.8.2.15 affected —
9.8.2.17 affected —
9.8.2.20 affected —
9.8.2.24 affected —
9.8.2.26 affected —
9.8.2.28 affected —
9.8.2.33 affected —
9.8.2.35 affected —
9.8.2.38 affected —
9.8.3.8 affected —
9.8.3.11 affected —
9.8.3.14 affected —
9.8.3.16 affected —
9.8.3.18 affected —
9.8.3.21 affected —
9.8.3 affected —
9.8.3.26 affected —
9.8.3.29 affected —
9.8.4 affected —
9.8.4.3 affected —
9.8.4.7 affected —
9.8.4.8 affected —
9.8.4.10 affected —
9.8.4.12 affected —
9.8.4.15 affected —
9.8.4.17 affected —
9.8.4.25 affected —
9.8.4.20 affected —
9.8.4.22 affected —
9.8.4.26 affected —
9.8.4.29 affected —
9.8.4.32 affected —
9.8.4.34 affected —
9.8.4.35 affected —
9.8.4.39 affected —
9.8.4.40 affected —
9.8.4.41 affected —
9.8.4.43 affected —
9.8.4.44 affected —
9.8.4.45 affected —
9.8.4.46 affected —
9.8.4.48 affected —
9.12.1 affected —
9.12.1.2 affected —
9.12.1.3 affected —
9.12.2 affected —
9.12.2.5 affected —
9.12.2.9 affected —
9.12.3 affected —
9.12.3.2 affected —
9.12.3.7 affected —
9.12.4 affected —
9.12.3.12 affected —
9.12.3.9 affected —
9.12.2.1 affected —
9.12.4.2 affected —
9.12.4.4 affected —
9.12.4.7 affected —
9.12.4.10 affected —
9.12.4.13 affected —
9.12.4.8 affected —
9.12.4.18 affected —
9.12.4.24 affected —
9.12.4.26 affected —
9.12.4.29 affected —
9.12.4.30 affected —
9.12.4.35 affected —
9.12.4.37 affected —
9.12.4.38 affected —
9.12.4.39 affected —
9.12.4.40 affected —
9.12.4.41 affected —
9.12.4.47 affected —
9.12.4.48 affected —
9.12.4.50 affected —
9.12.4.52 affected —
9.12.4.54 affected —
9.12.4.55 affected —
9.12.4.56 affected —
9.14.1 affected —
9.14.1.10 affected —
9.14.1.15 affected —
9.14.1.19 affected —
9.14.1.30 affected —
9.14.2 affected —
9.14.2.4 affected —
9.14.2.8 affected —
9.14.2.13 affected —
9.14.2.15 affected —
9.14.3 affected —
9.14.3.1 affected —
9.14.3.9 affected —
9.14.3.11 affected —
9.14.3.13 affected —
9.14.3.18 affected —
9.14.3.15 affected —
9.14.4 affected —
9.14.4.6 affected —
9.14.4.7 affected —
9.14.4.12 affected —
9.14.4.13 affected —
9.14.4.14 affected —
9.14.4.15 affected —
9.14.4.17 affected —
9.14.4.22 affected —
9.15.1 affected —
9.15.1.7 affected —
9.15.1.10 affected —
9.15.1.15 affected —
9.15.1.16 affected —
9.15.1.17 affected —
9.15.1.1 affected —
9.15.1.21 affected —
9.16.1 affected —
9.16.1.28 affected —
9.16.2 affected —
9.16.2.3 affected —
9.16.2.7 affected —
9.16.2.11 affected —
9.16.2.13 affected —
9.16.2.14 affected —
9.16.3 affected —
9.16.3.3 affected —
9.16.3.14 affected —
9.16.3.15 affected —
9.16.3.19 affected —
9.16.3.23 affected —
9.16.4 affected —
9.16.4.9 affected —
9.17.1 affected —
9.17.1.7 affected —
9.17.1.9 affected —
9.17.1.10 affected —
9.17.1.11 affected —
9.17.1.13 affected —
9.17.1.15 affected —
9.17.1.20 affected —
9.18.1 affected —
9.18.1.3 affected —
9.18.2 affected —
9.18.2.5 affected —
9.18.2.7 affected —
9.18.2.8 affected —
9.19.1 affected —
Cisco Cisco Firepower Threat Defense Software affected
Version Status Constraints
6.2.3 affected —
6.2.3.1 affected —
6.2.3.2 affected —
6.2.3.3 affected —
6.2.3.4 affected —
6.2.3.5 affected —
6.2.3.6 affected —
6.2.3.7 affected —
6.2.3.8 affected —
6.2.3.10 affected —
6.2.3.11 affected —
6.2.3.9 affected —
6.2.3.12 affected —
6.2.3.13 affected —
6.2.3.14 affected —
6.2.3.15 affected —
6.2.3.16 affected —
6.2.3.17 affected —
6.2.3.18 affected —
6.6.0 affected —
6.6.0.1 affected —
6.6.1 affected —
6.6.3 affected —
6.6.4 affected —
6.6.5 affected —
6.6.5.1 affected —
6.6.5.2 affected —
6.6.7 affected —
6.6.7.1 affected —
6.4.0 affected —
6.4.0.1 affected —
6.4.0.3 affected —
6.4.0.2 affected —
6.4.0.4 affected —
6.4.0.5 affected —
6.4.0.6 affected —
6.4.0.7 affected —
6.4.0.8 affected —
6.4.0.9 affected —
6.4.0.10 affected —
6.4.0.11 affected —
6.4.0.12 affected —
6.4.0.13 affected —
6.4.0.14 affected —
6.4.0.15 affected —
6.4.0.16 affected —
6.7.0 affected —
6.7.0.1 affected —
6.7.0.2 affected —
6.7.0.3 affected —
7.0.0 affected —
7.0.0.1 affected —
7.0.1 affected —
7.0.1.1 affected —
7.0.2 affected —
7.0.2.1 affected —
7.0.3 affected —
7.0.4 affected —
7.0.5 affected —
7.1.0 affected —
7.1.0.1 affected —
7.1.0.2 affected —
7.1.0.3 affected —
7.2.0 affected —
7.2.0.1 affected —
7.2.1 affected —
7.2.2 affected —
7.2.3 affected —
7.3.0 affected —
7.3.1 affected —
7.3.1.1 affected —
Cisco Cisco Firepower Extensible Operating System (FXOS) affected
Version Status Constraints
2.2.1.63 affected —
2.2.1.66 affected —
2.2.1.70 affected —
2.2.2.17 affected —
2.2.2.19 affected —
2.2.2.24 affected —
2.2.2.26 affected —
2.2.2.28 affected —
2.2.2.54 affected —
2.2.2.60 affected —
2.2.2.71 affected —
2.2.2.83 affected —
2.2.2.86 affected —
2.2.2.91 affected —
2.2.2.97 affected —
2.2.2.101 affected —
2.2.2.137 affected —
2.2.2.148 affected —
2.2.2.149 affected —
2.3.1.99 affected —
2.3.1.93 affected —
2.3.1.91 affected —
2.3.1.88 affected —
2.3.1.75 affected —
2.3.1.73 affected —
2.3.1.66 affected —
2.3.1.58 affected —
2.3.1.130 affected —
2.3.1.111 affected —
2.3.1.110 affected —
2.3.1.144 affected —
2.3.1.145 affected —
2.3.1.155 affected —
2.3.1.166 affected —
2.3.1.173 affected —
2.3.1.179 affected —
2.3.1.180 affected —
2.3.1.56 affected —
2.3.1.190 affected —
2.3.1.215 affected —
2.3.1.216 affected —
2.3.1.219 affected —
2.3.1.230 affected —
2.6.1.131 affected —
2.6.1.157 affected —
2.6.1.166 affected —
2.6.1.169 affected —
2.6.1.174 affected —
2.6.1.187 affected —
2.6.1.192 affected —
2.6.1.204 affected —
2.6.1.214 affected —
2.6.1.224 affected —
2.6.1.229 affected —
2.6.1.230 affected —
2.6.1.238 affected —
2.6.1.239 affected —
2.6.1.254 affected —
2.6.1.259 affected —
2.8.1.105 affected —
2.8.1.125 affected —
2.8.1.139 affected —
2.8.1.143 affected —
2.8.1.152 affected —
2.8.1.162 affected —
2.8.1.164 affected —
2.8.1.172 affected —
2.8.1.186 affected —
2.8.1.190 affected —
2.9.1.131 affected —
2.9.1.135 affected —
2.9.1.143 affected —
2.9.1.150 affected —
2.9.1.158 affected —
2.10.1.159 affected —
2.10.1.166 affected —
2.10.1.179 affected —
2.10.1.207 affected —
2.10.1.234 affected —
2.11.1.154 affected —
2.11.1.182 affected —
2.12.0.31 affected —
2.12.0.432 affected —
2.12.0.450 affected —
2.13.0.198 affected —

Configuration 1 [-]

AND
cpe:2.3:a:cisco:firepower_extensible_operating_system:-:*:*:*:*:*:*:*
OR cpe:2.3:h:cisco:firepower_1000:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_1010:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_1020:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_1030:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_1040:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_2100:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_2110:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_2120:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_2130:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_2140:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4100:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4110:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4110_next-generation_firewall:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4112:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4115:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4120:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4120_next-generation_firewall:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4125:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4140:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4140_next-generation_firewall:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4145:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4150:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_4150_next-generation_firewall:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300_security_appliance:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300_sm-24:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300_sm-36:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300_sm-40:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300_sm-44:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300_sm-44_x_3:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300_sm-48:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300_sm-56:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300_sm-56_x_3:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300_with_1_sm-24_module:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300_with_1_sm-36_module:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300_with_1_sm-44_module:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:firepower_9300_with_3_sm-44_module:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:secure_firewall_3105:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:secure_firewall_3110:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:secure_firewall_3120:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:secure_firewall_3130:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:secure_firewall_3140:-:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Cisco Subscribe
Firepower 1000 Subscribe
Firepower 1010 Subscribe
Firepower 1020 Subscribe
Firepower 1030 Subscribe
Firepower 1040 Subscribe
Firepower 2100 Subscribe
Firepower 2110 Subscribe
Firepower 2120 Subscribe
Firepower 2130 Subscribe
Firepower 2140 Subscribe
Firepower 4100 Subscribe
Firepower 4110 Subscribe
Firepower 4110 Next-generation Firewall Subscribe
Firepower 4112 Subscribe
Firepower 4115 Subscribe
Firepower 4120 Subscribe
Firepower 4120 Next-generation Firewall Subscribe
Firepower 4125 Subscribe
Firepower 4140 Subscribe
Firepower 4140 Next-generation Firewall Subscribe
Firepower 4145 Subscribe
Firepower 4150 Subscribe
Firepower 4150 Next-generation Firewall Subscribe
Firepower 9300 Subscribe
Firepower 9300 Security Appliance Subscribe
Firepower 9300 Sm-24 Subscribe
Firepower 9300 Sm-36 Subscribe
Firepower 9300 Sm-40 Subscribe
Firepower 9300 Sm-44 Subscribe
Firepower 9300 Sm-44 X 3 Subscribe
Firepower 9300 Sm-48 Subscribe
Firepower 9300 Sm-56 Subscribe
Firepower 9300 Sm-56 X 3 Subscribe
Firepower 9300 With 1 Sm-24 Module Subscribe
Firepower 9300 With 1 Sm-36 Module Subscribe
Firepower 9300 With 1 Sm-44 Module Subscribe
Firepower 9300 With 3 Sm-44 Module Subscribe
Firepower Extensible Operating System Subscribe
Secure Firewall 3105 Subscribe
Secure Firewall 3110 Subscribe
Secure Firewall 3120 Subscribe
Secure Firewall 3130 Subscribe
Secure Firewall 3140 Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2023-24413 A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or overwrite any file on the filesystem of an affected device, including system files. The vulnerability occurs because there is no validation of parameters when a specific CLI command is used. An attacker could exploit this vulnerability by authenticating to an affected device and using the command at the CLI. A successful exploit could allow the attacker to overwrite any file on the disk of the affected device, including system files. The attacker must have valid administrative credentials on the affected device to exploit this vulnerability.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-arbitrary-file-BLk6YupL cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-08-02T09:05:35.918Z

Reserved: 2022-10-27T18:47:50.369Z

Link: CVE-2023-20234

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-08-23T19:15:08.277

Modified: 2024-11-21T07:40:57.383

Link: CVE-2023-20234

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses