CVE-2020-3550
Last modified
CVE-2020-3550 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. A vulnerability in the sfmgr daemon of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to perform directory traversal and access directories outside the restricted path. The vulnerability is due to insufficient input validation. EPSS estimates a 2.21% chance of exploitation in the next 30 days.
Description
A vulnerability in the sfmgr daemon of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to perform directory traversal and access directories outside the restricted path. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a relative path in specific sfmgr commands. An exploit could allow the attacker to read or write arbitrary files on an sftunnel-connected peer device.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Secure Firewall Management Center | <= 6.0.1 |
| Cisco | Secure Firewall Management Center | >= 6.3.0, < 6.3.0.6 |
| Cisco | Secure Firewall Management Center | >= 6.4.0, < 6.4.0.10 |
| Cisco | Secure Firewall Management Center | 6.2.0 |
| Cisco | Secure Firewall Management Center | 6.2.1 |
| Cisco | Secure Firewall Threat Defense | <= 6.0.1 |
| Cisco | Secure Firewall Threat Defense | >= 6.3.0, < 6.3.0.6 |
| Cisco | Secure Firewall Threat Defense | >= 6.4.0, < 6.4.0.10 |
| Cisco | Secure Firewall Threat Defense | 6.2.0 |
| Cisco | Secure Firewall Threat Defense | 6.2.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-3550?
How severe is CVE-2020-3550?
How do I fix CVE-2020-3550?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-35494There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker…6.1
- CVE-2020-35495There's a flaw in binutils /bfd/pef.c. An attacker who is ab…5.5
- CVE-2020-35496There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c …5.5
- CVE-2020-35497A flaw was found in ovirt-engine 4.4.3 and earlier allowing …6.5
- CVE-2020-35498A vulnerability was found in openvswitch. A limitation in th…7.5
- CVE-2020-35499A NULL pointer dereference flaw in Linux kernel versions pri…6.7
- CVE-2020-35500Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-35501A flaw was found in the Linux kernels implementation of audi…3.4
- CVE-2020-35502A flaw was found in Privoxy in versions before 3.0.29. Memor…7.5
- CVE-2020-35503A NULL pointer dereference flaw was found in the megasas-gen…6
- CVE-2020-35504A NULL pointer dereference flaw was found in the SCSI emulat…6
- CVE-2020-35505A NULL pointer dereference flaw was found in the am53c974 SC…4.4
Are you affected by CVE-2020-3550?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST