Path traversal in Cisco Systems, Inc products - CVE-2023-20234
Published: August 24, 2023
Vulnerability identifier: #VU79939
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-20234
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing directory traversal sequences in the CLI. A remote administrator can send a specially crafted HTTP request and overwrite arbitrary files on the system.
Affected software
Cisco FXOS
Firepower 4100 Series Security Appliances
Firepower 2100 Series Security Appliances
Firepower 9300 Series Security Appliances
Secure Firewall 3100
Firepower 1000 Series Appliances
Firepower 4100 Series Security Appliances
Firepower 2100 Series Security Appliances
Firepower 9300 Series Security Appliances
Secure Firewall 3100
Firepower 1000 Series Appliances
How to mitigate CVE-2023-20234
Install update from vendor's website.
Firepower 4100 Series Security Appliances - addressed in versions 2.6.1.264, 2.6.1.265, 2.8.1.198, 2.10.1.245, 2.10.1.271, 2.11.1.200, 2.11.1.205, 2.12.0.467, 2.12.0.498, 2.12.1.29, 2.13.0.212, 2.13.0.243
Firepower 9300 Series Security Appliances - addressed in versions 2.6.1.264, 2.6.1.265, 2.8.1.198, 2.10.1.245, 2.10.1.271, 2.11.1.200, 2.11.1.205, 2.12.0.467, 2.12.0.498, 2.12.1.29, 2.13.0.212, 2.13.0.243
Secure Firewall 3100 - addressed in versions 7.0.6, 7.2.4, 7.2.4.1, 7.2.5, 9.12.4.58, 9.14.4.23, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.17.1.30, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18
Firepower 1000 Series Appliances - addressed in versions 7.0.6, 7.2.4, 7.2.4.1, 7.2.5, 9.12.4.58, 9.14.4.23, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.17.1.30, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18
Firepower 2100 Series Security Appliances - addressed in versions 7.0.6, 7.2.4, 7.2.4.1, 7.2.5, 9.12.4.58, 9.14.4.23, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.17.1.30, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18
Firepower 9300 Series Security Appliances - addressed in versions 2.6.1.264, 2.6.1.265, 2.8.1.198, 2.10.1.245, 2.10.1.271, 2.11.1.200, 2.11.1.205, 2.12.0.467, 2.12.0.498, 2.12.1.29, 2.13.0.212, 2.13.0.243
Secure Firewall 3100 - addressed in versions 7.0.6, 7.2.4, 7.2.4.1, 7.2.5, 9.12.4.58, 9.14.4.23, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.17.1.30, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18
Firepower 1000 Series Appliances - addressed in versions 7.0.6, 7.2.4, 7.2.4.1, 7.2.5, 9.12.4.58, 9.14.4.23, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.17.1.30, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18
Firepower 2100 Series Security Appliances - addressed in versions 7.0.6, 7.2.4, 7.2.4.1, 7.2.5, 9.12.4.58, 9.14.4.23, 9.16.4.14, 9.16.4.18, 9.16.4.19, 9.16.4.27, 9.17.1.30, 9.18.3, 9.18.3.39, 9.18.3.46, 9.18.3.53, 9.18.3.55, 9.19.1.5, 9.19.1.9, 9.19.1.12, 9.19.1.18