CVE-2020-3352 Cisco Firepower Threat Defense Software Hidden Commands Vulnerability

What is CVE-2020-3352?

CVE-2020-3352 is a medium-severity vulnerability in Cisco Secure Firewall Threat Defense, published on 21 Oct 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access hidden commands. The vulnerability is due to the presence of undocumented configuration commands. An attacker could exploit this vulnerability by performing specific steps that make the hidden commands accessible. A successful exploit could allow the attacker to make configuration changes to various sections of an affected device that should not be exposed to CLI access.

Weakness: CWE-912

Which versions are affected by CVE-2020-3352?

It affects 1 product.

Products include Cisco Secure Firewall Threat Defense.

How do I fix CVE-2020-3352?

No fix has been published for CVE-2020-3352 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-3352 being exploited?

There is no known exploitation of CVE-2020-3352 in the wild and no public exploit code.

Other vulnerabilities in Cisco Secure Firewall Threat Defense

• CVE-2024-20412 Hardcoded credentials in Cisco Firepower Threat Defense Software Critical 9.3
• CVE-2024-20330 Memory corruption in Cisco Firepower Threat Defense Software High 8.6
• CVE-2024-20339 Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability High 8.6
• CVE-2024-20351 Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability High 8.6
• CVE-2023-20083 Denial of service in Cisco Firepower Threat Defense Software High 8.6

All Cisco Secure Firewall Threat Defense vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-qvv9-2cww-q346.