Product:
Cisco Secure Firewall Threat Defense
Summary
A vulnerability in Cisco Secure Firewall Threat Defense Software could allow an authenticated, local attacker to cause the device to unexpectedly reload, leading to a denial of service condition. This issue arises from improper validation of user-supplied input. An attacker with a low-privileged account could exploit this vulnerability using crafted commands at the CLI prompt.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-20064 |
Exploitation
To exploit this vulnerability, an attacker must have a low-privileged account on the device. By entering specially crafted commands at the command line interface (CLI) prompt, the attacker can trigger the device to reload unexpectedly, resulting in a denial of service condition.
Affected Products
- Cisco Secure Firewall Threat Defense Software: Vulnerable to denial of service due to improper input validation.
Mitigation
To mitigate this vulnerability, it is recommended that users apply the latest security patches provided by Cisco. Additionally, restricting access to the CLI for low-privileged accounts can help prevent exploitation.