What is CVE-2020-3514?

CVE-2020-3514 is a high-severity vulnerability in Cisco Firepower Threat Defense Software, classified under CWE-216. CVSS score: 8.2/10. Published 2020-10-21.

How severe is CVE-2020-3514?

High severity. CVSS v3 base score is 8.2 out of 10.

Vulnerability in Cisco Firepower Threat Defense Software

CVE-2020-3514

A vulnerability in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their Cisco FTD instance and execute commands with root privileges in t…

EPSS: 0.004 (28.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.

Affected products

Cisco Firepower Threat Defense Software — versions n/a
Cisco Firepower_threat_defense — versions 6.6.0
Cisco Secure_firewall_management_center

Weakness classification (CWE)

CWE-216

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2020-3514?: CVE-2020-3514 is a high-severity vulnerability in Cisco Firepower Threat Defense Software, classified under CWE-216. CVSS score: 8.2/10. Published 2020-10-21.
How severe is CVE-2020-3514?: High severity. CVSS v3 base score is 8.2 out of 10.