CVE-2021-34761
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A vulnerability in Cisco Firepower Threat Defense (FTD) Software allows an authenticated local attacker with administrative privileges to overwrite or append arbitrary data to system files with root privileges. This is due to incomplete validation of user input for a specific CLI command.
Risk Assessment
An attacker with administrative access can modify system files, potentially leading to system integrity compromise, privilege escalation, or permanent device damage.
Recommendation
Apply updates provided by Cisco for FTD Software. Restrict administrative access to devices to trusted personnel only.
Original NVD description (English source)
A vulnerability in Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite or append arbitrary data to system files using root-level privileges. The attacker must have administrative credentials on the device. This vulnerability is due to incomplete validation of user input for a specific CLI command. An attacker could exploit this vulnerability by authenticating to the device with administrative privileges and issuing a CLI command with crafted user parameters. A successful exploit could allow the attacker to overwrite or append arbitrary data to system files using root-level privileges.