High severity7.8NVD Advisory· Published Oct 2, 2019· Updated Aug 11, 2026

CVE-2019-12699

Description

Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute commands on the underlying operating system (OS) with root privileges. These vulnerabilities are due to insufficient input validation. An attacker could exploit these vulnerabilities by including crafted arguments to specific CLI commands. A successful exploit could allow the attacker to execute commands on the underlying OS with root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Secure Firewall Threat Defense
cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*
Range: <=6.1.0
Cisco Systems, Inc./Firepower 9300 Firmware4 versions
cpe:2.3:o:cisco:firepower_9300_firmware:2.4\(1.214\):*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:cisco:firepower_9300_firmware:2.4\(1.214\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:firepower_9300_firmware:2.4\(1.216\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:firepower_9300_firmware:2.4\(2.54\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:firepower_9300_firmware:r241:*:*:*:*:*:*:*
Cisco Systems, Inc./Firepower Extensible Operating System2 versions
cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:*range: >=2.0,<2.2.2.101
- (no CPE)range: unspecified
Cisco Systems, Inc./Firepower Threat Defense Softwarellm-fuzzy
Cisco Systems, Inc./FXOS Softwarellm-fuzzy

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fxos-cmd-injectnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000