Product:
Cisco Secure Firewall ASA Software
Summary
A vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and Secure FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. This vulnerability is due to insufficient input validation of user-supplied command arguments. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6 | CVE-2026-20016 |
Exploitation
To exploit this vulnerability, an attacker must have valid administrative credentials on an affected device. The attacker can submit crafted input for specific CLI commands, which takes advantage of the insufficient input validation. If successful, this could lead to executing arbitrary commands with root-level privileges.
Affected Products
- Cisco Secure Firewall ASA Software: Affected by CLI command injection vulnerability allowing command execution with root privileges.
- Cisco Secure FTD Software: Similar vulnerability exists, enabling local attackers to execute arbitrary commands.
Mitigation
To mitigate this vulnerability, it is recommended to ensure that only trusted administrators have access to the affected devices. Regularly update the software to the latest version and apply any security patches provided by Cisco. Additionally, implement strict access controls and monitor for any unauthorized access attempts.