Path traversal in Cisco Firepower 4100 Series Next-Generation Firewall and Firepower 9300…
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
A vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote attacker using path traversal techniques to create or overwrite arbitrary files on an affected device. The vulnerability is due to insufficient validation during the application image upload process. An attacker could exploit this vulnerability by creating an application image containing malicious code and installing the image on the affected device using the CLI or web-based user interface (web UI). These actions occur prior to signature verification and could allow the attacker to create and execute arbitrary code with root privileges. Note: A missing or invalid signature in the application image will cause the upload process to fail, but does not prevent the exploit. Cisco Bug IDs: CSCvc21901.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Cisco Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance unknown | Cisco Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance unknown | — | No fix listed | CNA |
- Cisco Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance unknown Vendor— Affected Cisco Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance unknown Fixed in — No fix listed CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:cisco:fxos:2.0\(1.68\):*:*:*:*:*:*:* | 2.0(1.68) | Vulnerable | Cisco |
| cpe:2.3:h:cisco:firepower_4110:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:firepower_4120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:firepower_4140:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:firepower_4150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:firepower_9300_security_appliance:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
- cpe:2.3:o:cisco:fxos:2.0\(1.68\):*:*:*:*:*:*:* Versions 2.0(1.68) Vulnerable ·Cisco
- cpe:2.3:h:cisco:firepower_4110:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:firepower_4120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:firepower_4140:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:firepower_4150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:firepower_9300_security_appliance:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-0300
- 2026-10-03 Alias added: GHSA-ch88-fg86-h47v
References
More Cisco Fxos vulnerabilities
- TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
- TI-2017-02979 A vulnerability in the authentication, authorization, and accounting (AAA) implementation… CVSS 3.0HIGH 8.6
- TI-2020-02733 Cisco FXOS and UCS Manager Software Local Management CLI Command Injection Vulnerability CVSS 3.1HIGH 7.8
- TI-2021-13714 Multiple Cisco Operating Systems Unidirectional Link Detection Denial of Service Vulnerability CVSS 3.1HIGH 7.4
- TI-2020-02682 Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability CVSS 3.1MEDIUM 6.5
- TI-2018-00253 Access control flaw in Cisco FXOS and NX-OS unknown CVSS 3.0MEDIUM 6.7
Sources
- CVE-2018-0300 · CVE Program
- CVE-2018-0300 · NVD
- FIRST EPSS
- GHSA-ch88-fg86-h47v · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences