Medium severity6.7NVD Advisory· Published Feb 26, 2020· Updated Aug 11, 2026

CVE-2020-3166

Description

A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS). The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted arguments to a specific CLI command. A successful exploit could allow the attacker to read or write to arbitrary files on the underlying OS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Secure Firewall Threat Defense
cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*
Range: >=6.2.2,<6.2.3.16
Cisco Systems, Inc./Cisco Adaptive Security Appliance
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
Range: >=9.8,<9.9.2.66
Cisco Systems, Inc./Firepower Extensible Operating System2 versions
cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:firepower_extensible_operating_system:*:*:*:*:*:*:*:*range: <2.2.2.97
- (no CPE)range: unspecified
Cisco Systems, Inc./FXOS Softwarellm-fuzzy

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-fxos-cli-filenvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000