CVE-2020-3308
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrator-level credentials to install a malicious software patch. This is due to improper verification of digital signatures for patch images. An attacker could exploit this by crafting an unsigned patch to bypass signature checks, potentially booting a malicious patch image.
Risk Assessment
The risk includes potential installation of malicious software by a privileged administrator, which could lead to full device compromise.
Recommendation
Apply the latest software updates from Cisco that address this vulnerability and restrict administrative access to trusted personnel.
Original NVD description (English source)
A vulnerability in the Image Signature Verification feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signatures for patch images. An attacker could exploit this vulnerability by crafting an unsigned software patch to bypass signature checks and loading it on an affected device. A successful exploit could allow the attacker to boot a malicious software patch image.