THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2020-3253 (MEDIUM 6.7) — A vulnerability in the support tunnel feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access the shell of an affected device even though expert mode is disabled. The vulnerability is due to improper configuration of the sup

[NVD] CVE-2020-3253 (MEDIUM 6.7) — A vulnerability in the support tunnel feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access the shell of an affected device even though expert mode is disabled. The vulnerability is due to improper configuration of the sup

lownvdPublished 2020-05-06

CVE-2020-3253 CVSS: 6.7 MEDIUM Published: 2020-05-06T17:15:12.540

A vulnerability in the support tunnel feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access the shell of an affected device even though expert mode is disabled. The vulnerability is due to improper configuration of the support tunnel feature. An attacker could exploit this v

Indicators of compromise

CVE-2020-3253cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2020-3253