High severity · published Oct 2, 2019
CVE-2019-12674
Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for…
8.2
CVSS
0.8%
EPSS
No
On KEV
Description
Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insufficient protections on the underlying filesystem. An attacker could exploit these vulnerabilities by modifying critical files on the underlying filesystem. A successful exploit could allow the attacker to execute commands with root privileges within the host namespace. This could allow the attacker to impact other running FTD instances.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
F4
Firepower 4110 Firmware · Cisco
All versions, or not specified · source: NVD
F4
Firepower 4115 Firmware · Cisco
All versions, or not specified · source: NVD
F4
Firepower 4120 Firmware · Cisco
All versions, or not specified · source: NVD
F4
Firepower 4125 Firmware · Cisco
All versions, or not specified · source: NVD
F4
Firepower 4140 Firmware · Cisco
All versions, or not specified · source: NVD
F4
Firepower 4145 Firmware · Cisco
All versions, or not specified · source: NVD
F4
Firepower 4150 Firmware · Cisco
All versions, or not specified · source: NVD
F9
Firepower 9300 Firmware · Cisco
All versions, or not specified · source: NVD
SF
Secure Firewall Threat Defense · Cisco
before 6.4.0.2 · source: NVD
Affected product
F4
Firepower 4110 Firmware
Cisco
More from Firepower 4110 Firmware
8.8
CVE-2019-12675
Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for…
6.7
CVE-2022-20865
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges