Medium severity · published Nov 15, 2024
CVE-2021-34752
Cisco Firepower Threat Defense Command Injection Vulnerabilities
6.7
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability in the CLI of Cisco FTD Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands with root privileges on the underlying operating system of an affected device.  This vulnerability is due to insufficient validation of user-supplied command arguments. An attacker could exploit this vulnerability by submitting crafted input to the affected commands. A successful exploit could allow the attacker to execute commands with root privileges on the underlying operating system. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cisco Firepower Threat Defense Software · Cisco
6.2.3; 6.6.0.1; 6.4.0.6 · source: vendor
FT
Firepower Threat Defense Software · Cisco
before 6.4.0.13; 6.5.0 before 6.6.5; 6.7.0 before 6.7.0.3; 7.0.0 before 7.0.1 · source: CISA
Affected product
CF
Cisco Firepower Threat Defense Software
Cisco
More from Cisco Firepower Threat Defense Software
9.1
CVE-2023-20269
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
8.6
CVE-2024-20353
Cisco ASA and FTD Denial of Service Vulnerability
6.0
CVE-2024-20359
Cisco ASA and FTD Privilege Escalation Vulnerability
5.8
CVE-2024-20481
Cisco ASA and FTD Denial-of-Service Vulnerability
9.0
CVE-2025-20363
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software,…