410
VMScore

CVE-2022-20729

Published: 03/05/2022 Updated: 07/11/2023
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 410
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

A vulnerability in CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local malicious user to inject XML into the command parser. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted input in commands. A successful exploit could allow the malicious user to inject XML into the command parser, which could result in unexpected processing of the command and unexpected command output.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco firepower threat defense

Vendor Advisories

A vulnerability in CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to inject XML into the command parser This vulnerability is due to insufficient input validation An attacker could exploit this vulnerability by including crafted input in commands A successful exploit could allow the attacker to ...