Threats Tagged 'cve-2023-20063'

CVE-2023-20063 is a high-severity code injection vulnerability affecting Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) devices. It allows an authenticated local attacker with administrative privileges on either FMC or FTD to execute arbitrary commands with root privileges on the paired device. The vulnerability arises from insufficient validation of user-supplied input in inter-device communication, enabling command injection via expert mode. Exploitation requires high privileges and no user interaction but can lead to full system compromise, impacting confidentiality, integrity, and availability. There are no known exploits in the wild yet, but the broad range of affected versions and critical access level make timely patching essential. European organizations using Cisco Firepower solutions in critical infrastructure or enterprise networks are at risk. Mitigation involves applying Cisco patches when available, restricting administrative access, and monitoring for anomalous expert mode activity. Countries with significant Cisco Firepower deployments and critical infrastructure, such as Germany, France, the UK, and the Netherlands, are most likely to be affected.

HighVulnerabilityGermanyFranceNetherlands+7#cve#cve-2023-20063