Root Escalation via Improper Input in Cisco FTD/FMC InterDevice Comm
CVE-2023-20063 Published on November 1, 2023

Cisco Cisco Firepower Threat Defense Software and Cisco Firepower Management Center Code Injection Vulnerability
A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devices that are running Cisco Firepower Management (FMC) Software could allow an authenticated, local attacker to execute arbitrary commands with root permissions on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by accessing the expert mode of an affected device and submitting specific commands to a connected system. A successful exploit could allow the attacker to execute arbitrary code in the context of an FMC device if the attacker has administrative privileges on an associated FTD device. Alternatively, a successful exploit could allow the attacker to execute arbitrary code in the context of an FTD device if the attacker has administrative privileges on an associated FMC device.

NVD

Vulnerability Analysis

CVE-2023-20063 can be exploited with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

What is a Code Injection Vulnerability?

The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

CVE-2023-20063 has been classified to as a Code Injection vulnerability or weakness.


Products Associated with CVE-2023-20063

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2023-20063 are published in these products:

Cisco Firepower Management Center
 
Cisco Firepower Threat Defense
 
Cisco Secure Firewall Management Center
 
Cisco Firepower Threat Defense Software
 

Affected Versions

Cisco Firepower Management Center: Cisco Firepower Threat Defense Software:

Exploit Probability

EPSS
0.04%
Percentile
10.86%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.