CVE:CVE-2019-12699
CNNVD:CNNVD-201910-090
Cisco FXOS Software和Cisco FTD中的CLI存在输入验证错误漏洞。本地攻击者可借助特制的参数利用该漏洞以root权限在底层操作系统上执行命令。以下产品及版本受到影响：Cisco Firepower 1000 Series Appliances；Cisco Firepower 2100 Series Appliances；Cisco Firepower 4100 Series Appliances；Cisco Firepower 9300 Series Appliances。
solution:Upgrade cisco firepower_9300_firmware to a higher version than 2.4(1.214,2.4(1.216,2.4(2.54,r241,and avoid the version 2.4(1.214),2.4(1.216),2.4(2.54),r241; Upgrade cisco firepower_threat_defense to a higher version than 6.1.0,6.2.3.14,6.3.0.3,and avoid the version (,6.1.0],[6.2.0,6.2.3.14),[6.3.0,6.3.0.3); Upgrade cisco firepower_extensible_operating_system to a higher version than 2.2.2.101,2.3.1.155,2.4.1.238,and avoid the version [2.0,2.2.2.101),[2.3,2.3.1.155),[2.4,2.4.1.238)