CVE-2020-3171

Cisco FXOS and UCS Manager Software Local Management CLI Command Injection Vulnerability

HIGH

7.8

CVSS Score

Published: February 26, 2020 at 04:50 PM UTC

Updated: June 17, 2026 at 03:17 AM UTC

22 products affected across 1 vendorFxosUcs ManagerFirepower 4110

Using Cisco Adaptive Security Appliance (ASA) Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Adaptive Security Appliance (ASA) Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.5%

SSVC

No known exploit

Description

A vulnerability in the local management (local-mgmt) CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted arguments to specific commands. A successful exploit could allow the attacker to execute arbitrary commands on the underlying OS with the privileges of the currently logged-in user for all affected platforms excluding Cisco UCS 6400 Series Fabric Interconnects. On Cisco UCS 6400 Series Fabric Interconnects, the injected commands are executed with root privileges.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fxos · Cisco

95%

2.4(1.214)2.4(1.216)

cisco-firepower-2110 (environment) · cisco-firepower-2120 (environment) · cisco-firepower-2130 (environment) · cisco-firepower-2140 (environment) · cisco-firepower-4110 (environment) · cisco-firepower-4115 (environment) · cisco-firepower-4120 (environment) · cisco-firepower-4125 (environment) · cisco-firepower-4140 (environment) · cisco-firepower-4145 (environment) · cisco-firepower-4150 (environment) · cisco-firepower-9300 (environment)

Ucs Manager · Cisco

95%

4.0(1a)a

cisco-ucs-6248up (environment) · cisco-ucs-6296up (environment) · cisco-ucs-6324 (environment) · cisco-ucs-6332 (environment) · cisco-ucs-6332-16up (environment) · cisco-ucs-64108 (environment) · cisco-ucs-6454 (environment)

Adaptive Security Appliance · Cisco

60%

All versions

Firepower 2110 · Ciscodevice

80%

All versions

Firepower 2120 · Ciscodevice

80%

All versions

Firepower 2130 · Ciscodevice

80%

All versions