A vulnerability in Cisco FXOS Software could allow an authenticated, local attacker with administrative credentials to cause a buffer overflow condition. The vulnerability is due to incorrect bounds checking of values that are parsed from a specific file. An attacker could exploit this vulnerability by supplying a crafted file that, when it is processed, may cause a stack-based buffer overflow. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system with root privileges. An attacker would need to have valid administrative credentials to exploit this vulnerability.
References
| Link | Resource |
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-buffer-cSdmfWUt | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
20 Apr 2023, 15:27
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Cisco firepower Extensible Operating System
|
|
| CPE | cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:* |
19 Oct 2021, 19:54
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 |
Information
Published : 2020-09-04 03:15
Updated : 2023-12-10 13:27
NVD link : CVE-2020-3545
Mitre link : CVE-2020-3545
CVE.ORG link : CVE-2020-3545
JSON object : View
Products Affected
cisco
- firepower_4112
- firepower_4150
- firepower_4120
- firepower_4110
- firepower_4145
- firepower_4125
- firepower_4140
- firepower_extensible_operating_system
- firepower_4115
- firepower_9300