High severity7.2NVD Advisory· Published May 6, 2020· Updated Jun 17, 2026

CVE-2020-3309

Description

A vulnerability in Cisco Firepower Device Manager (FDM) On-Box software could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by uploading a malicious file to an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on as well as modify the underlying operating system of an affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Firepower Device Manager On Box
cpe:2.3:a:cisco:firepower_device_manager_on-box:*:*:*:*:*:*:*:*
Range: <6.2.3
Cisco Systems, Inc./Firepower Device Managerllm-fuzzy
Cisco Systems, Inc./Firepower Threat Defense Softwarecpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fdmfo-HvPWKxDenvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000