CVE-2020-3352: Cisco Firepower Threat Defense Software Hidden Commands Vulnerability

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-10-21 · updated 2026-08-11
Weakness: CWE-912

Description

A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to access hidden commands. The vulnerability is due to the presence of undocumented configuration commands. An attacker could exploit this vulnerability by performing specific steps that make the hidden commands accessible. A successful exploit could allow the attacker to make configuration changes to various sections of an affected device that should not be exposed to CLI access.

Affected products

Cisco Firepower Threat Defense Software: before 6.3.0.6; from 6.4.0 before 6.4.0.10; from 6.5.0 before 6.5.0.5; from 6.6.0 before 6.6.1 — fixed in 6.3.0.6, 6.4.0.10, 6.5.0.5, 6.6.1

How to fix

Upgrade to a fixed version: Cisco Firepower Threat Defense Software 6.3.0.6, 6.4.0.10, 6.5.0.5, 6.6.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-3352 or the next vulnerability affects your stack