CVE-2021-34755 Cisco Firepower Threat Defense Software Command Injection Vulnerabilities
Authenticated local attackers can execute arbitrary commands with root privileges in Cisco Firepower Threat Defense CLI.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-34755?
CVE-2021-34755 is a medium-severity command injection vulnerability in Cisco Secure Firewall Threat Defense, published on 27 Oct 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory.
Which versions are affected by CVE-2021-34755?
It affects 3 products.
Products include Cisco Firepower Management Center Virtual Appliance, Cisco Secure Firewall Threat Defense, Cisco Sourcefire Defense Center.
How do I fix CVE-2021-34755?
No fix has been published for CVE-2021-34755 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2021-34755 being exploited?
There is no known exploitation of CVE-2021-34755 in the wild and no public exploit code.
Other vulnerabilities in Cisco Secure Firewall Threat Defense
- CVE-2021-34781 Cisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability
- CVE-2021-34762 Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability
- CVE-2021-34756 Cisco Firepower Threat Defense Software Command Injection Vulnerabilities
- CVE-2021-34763 Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities
- CVE-2021-34764 Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities
Sources
Also known as GHSA-9jjh-cpjv-rhw6.