CVE-2022-20828

A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER module as the root user. This vulnerability is due to improper handling of undefined command parameters. An attacker could exploit this vulnerability by using a crafted command on the CLI or by submitting a crafted HTTPS request to the web-based management interface of the Cisco ASA that is hosting the ASA FirePOWER module. Note: To exploit this vulnerability, the attacker must have administrative access to the Cisco ASA. A user who has administrative access to a particular Cisco ASA is also expected to have administrative access to the ASA FirePOWER module that is hosted by that Cisco ASA.

• CWE-236

• http://packetstormsecurity.com/files/168256/Cisco-ASA-X-With-FirePOWER-Services-Authenticated-Command-Injection.htmlExploit, Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asasfr-cmd-inject-PE4GfdGVendor Advisory
• https://www.rapid7.com/blog/post/2022/08/11/rapid7-discovered-vulnerabilities-in-cisco-asa-asdm-and-firepower-services-software/Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/168256/Cisco-ASA-X-With-FirePOWER-Services-Authenticated-Command-Injection.htmlExploit, Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asasfr-cmd-inject-PE4GfdGVendor Advisory
• https://www.rapid7.com/blog/post/2022/08/11/rapid7-discovered-vulnerabilities-in-cisco-asa-asdm-and-firepower-services-software/Exploit, Third Party Advisory

Published

Jun 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20822A vulnerability in the web-based management interface of Cis…8.1
• CVE-2022-20823A vulnerability in the OSPF version 3 (OSPFv3) feature of Ci…8.6
• CVE-2022-20824A vulnerability in the Cisco Discovery Protocol feature of C…8.8
• CVE-2022-20825A vulnerability in the web-based management interface of Cis…9.8
• CVE-2022-20826A vulnerability in the secure boot implementation of Cisco S…6.8
• CVE-2022-20827Multiple vulnerabilities in Cisco Small Business RV160, RV26…10
• CVE-2022-20829A vulnerability in the packaging of Cisco Adaptive Security …7.2
• CVE-2022-2083The Simple Single Sign On WordPress plugin through 4.1.0 lea…7.5
• CVE-2022-20830A vulnerability in authentication mechanism of Cisco Softwar…5.3
• CVE-2022-20831Multiple vulnerabilities in the web-based management interfa…4.8
• CVE-2022-20832Multiple vulnerabilities in the web-based management interfa…4.8
• CVE-2022-20833Multiple vulnerabilities in the web-based management interfa…4.8