CVE-2022-20828 : A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Secur

A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER module as the root user. This vulnerability is due to improper handling of undefined command parameters. An attacker could exploit this vulnerability by using a crafted command on the CLI or by submitting a crafted HTTPS request to the web-based management interface of the Cisco ASA that is hosting the ASA FirePOWER module. Note: To exploit this vulnerability, the attacker must have administrative access to the Cisco ASA. A user who has administrative access to a particular Cisco ASA is also expected to have administrative access to the ASA FirePOWER module that is hosted by that Cisco ASA.

Published 2022-06-24 16:15:09

Updated 2022-10-26 19:46:39

Source Cisco Systems, Inc.

View at NVD, CVE.org

Products affected by CVE-2022-20828

Cisco » Asa Firepower
Versions from including (>=) 6.5.0 and before (<) 6.6.7
cpe:2.3:a:cisco:asa_firepower:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Firepower 1010 » Version: N/A
When used together with: Cisco » Firepower 1120 » Version: N/A
When used together with: Cisco » Firepower 1140 » Version: N/A
When used together with: Cisco » Firepower 1150 » Version: N/A
When used together with: Cisco » Firepower 2110 » Version: N/A
When used together with: Cisco » Firepower 2120 » Version: N/A
When used together with: Cisco » Firepower 2130 » Version: N/A
When used together with: Cisco » Firepower 2140 » Version: N/A
When used together with: Cisco » Firepower 4110 » Version: N/A
When used together with: Cisco » Firepower 4112 » Version: N/A
When used together with: Cisco » Firepower 4115 » Version: N/A
When used together with: Cisco » Firepower 4120 » Version: N/A
When used together with: Cisco » Firepower 4125 » Version: N/A
When used together with: Cisco » Firepower 4140 » Version: N/A
When used together with: Cisco » Firepower 4145 » Version: N/A
When used together with: Cisco » Firepower 4150 » Version: N/A
When used together with: Cisco » Firepower 9300 » Version: N/A
When used together with: Cisco » Firepower Management Center » Version: N/A
When used together with: Cisco » Firepower Management Center Virtual Appliance » Version: N/A
Cisco » Asa Firepower
Versions before (<) 6.2.3.19
cpe:2.3:a:cisco:asa_firepower:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Firepower 1010 » Version: N/A
When used together with: Cisco » Firepower 1120 » Version: N/A
When used together with: Cisco » Firepower 1140 » Version: N/A
When used together with: Cisco » Firepower 1150 » Version: N/A
When used together with: Cisco » Firepower 2110 » Version: N/A
When used together with: Cisco » Firepower 2120 » Version: N/A
When used together with: Cisco » Firepower 2130 » Version: N/A
When used together with: Cisco » Firepower 2140 » Version: N/A
When used together with: Cisco » Firepower 4110 » Version: N/A
When used together with: Cisco » Firepower 4112 » Version: N/A
When used together with: Cisco » Firepower 4115 » Version: N/A
When used together with: Cisco » Firepower 4120 » Version: N/A
When used together with: Cisco » Firepower 4125 » Version: N/A
When used together with: Cisco » Firepower 4140 » Version: N/A
When used together with: Cisco » Firepower 4145 » Version: N/A
When used together with: Cisco » Firepower 4150 » Version: N/A
When used together with: Cisco » Firepower 9300 » Version: N/A
When used together with: Cisco » Firepower Management Center » Version: N/A
When used together with: Cisco » Firepower Management Center Virtual Appliance » Version: N/A
Cisco » Asa Firepower
Versions from including (>=) 6.7.0 and before (<) 7.0.2.1
cpe:2.3:a:cisco:asa_firepower:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Firepower 1010 » Version: N/A
When used together with: Cisco » Firepower 1120 » Version: N/A
When used together with: Cisco » Firepower 1140 » Version: N/A
When used together with: Cisco » Firepower 1150 » Version: N/A
When used together with: Cisco » Firepower 2110 » Version: N/A
When used together with: Cisco » Firepower 2120 » Version: N/A
When used together with: Cisco » Firepower 2130 » Version: N/A
When used together with: Cisco » Firepower 2140 » Version: N/A
When used together with: Cisco » Firepower 4110 » Version: N/A
When used together with: Cisco » Firepower 4112 » Version: N/A
When used together with: Cisco » Firepower 4115 » Version: N/A
When used together with: Cisco » Firepower 4120 » Version: N/A
When used together with: Cisco » Firepower 4125 » Version: N/A
When used together with: Cisco » Firepower 4140 » Version: N/A
When used together with: Cisco » Firepower 4145 » Version: N/A
When used together with: Cisco » Firepower 4150 » Version: N/A
When used together with: Cisco » Firepower 9300 » Version: N/A
When used together with: Cisco » Firepower Management Center » Version: N/A
When used together with: Cisco » Firepower Management Center Virtual Appliance » Version: N/A
Cisco » Asa Firepower
Versions from including (>=) 6.3.0 and before (<) 6.4.0.15
cpe:2.3:a:cisco:asa_firepower:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Firepower 1010 » Version: N/A
When used together with: Cisco » Firepower 1120 » Version: N/A
When used together with: Cisco » Firepower 1140 » Version: N/A
When used together with: Cisco » Firepower 1150 » Version: N/A
When used together with: Cisco » Firepower 2110 » Version: N/A
When used together with: Cisco » Firepower 2120 » Version: N/A
When used together with: Cisco » Firepower 2130 » Version: N/A
When used together with: Cisco » Firepower 2140 » Version: N/A
When used together with: Cisco » Firepower 4110 » Version: N/A
When used together with: Cisco » Firepower 4112 » Version: N/A
When used together with: Cisco » Firepower 4115 » Version: N/A
When used together with: Cisco » Firepower 4120 » Version: N/A
When used together with: Cisco » Firepower 4125 » Version: N/A
When used together with: Cisco » Firepower 4140 » Version: N/A
When used together with: Cisco » Firepower 4145 » Version: N/A
When used together with: Cisco » Firepower 4150 » Version: N/A
When used together with: Cisco » Firepower 9300 » Version: N/A
When used together with: Cisco » Firepower Management Center » Version: N/A
When used together with: Cisco » Firepower Management Center Virtual Appliance » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-20828

EPSS FAQ

11.71%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 95 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2022-20828

Cisco ASA-X with FirePOWER Services Authenticated Command Injection

Disclosure Date: 2022-06-22

First seen: 2022-12-23

exploit/linux/http/cisco_asax_sfr_rce

This module exploits an authenticated command injection vulnerability affecting Cisco ASA-X with FirePOWER Services. This exploit is executed through the ASA's ASDM web server and lands in the FirePower Services SFR module's Linux virtual machine as the root

More information

CVSS scores for CVE-2022-20828

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C	8.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N	1.2	5.2	Cisco Systems, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: None
7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	1.2	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-20828

CWE-236 Improper Handling of Undefined Parameters

The product does not handle or incorrectly handles when a particular parameter, field, or argument name is not defined or supported by the product.

Assigned by: ykramarz@cisco.com (Secondary)

References for CVE-2022-20828

https://www.rapid7.com/blog/post/2022/08/11/rapid7-discovered-vulnerabilities-in-cisco-asa-asdm-and-firepower-services-software/

Rapid7 Discovered Vulnerabilities in Cisco ASA, ASDM, and FirePOWER | Rapid7 Blog
Exploit;Third Party Advisory

CVEs referencing this url
http://packetstormsecurity.com/files/168256/Cisco-ASA-X-With-FirePOWER-Services-Authenticated-Command-Injection.html

Cisco ASA-X With FirePOWER Services Authenticated Command Injection ≈ Packet Storm
Exploit;Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asasfr-cmd-inject-PE4GfdG

Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability
Vendor Advisory

Jump to