---
id: CVE-2019-12699
title: >-
  Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower
  Threat Defense (FTD) Software could allow an authenticated, local attacker to
  execute commands on the underlying operating system (OS) with root privileges
summary: >-
  Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower
  Threat Defense (FTD) Software could allow an authenticated, local attacker to
  execute commands on the underlying operating system (OS) with root privileges.
  T…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-20
  - CWE-78
vendor: cisco
product: secure_firewall_threat_defense
affected:
  - firepower_9300_firmware = 2.4(1.214)
  - firepower_9300_firmware = 2.4(1.216)
  - firepower_9300_firmware = 2.4(2.54)
  - firepower_9300_firmware = r241
  - secure_firewall_threat_defense <= 6.1.0
  - 'secure_firewall_threat_defense >= 6.2.0, < 6.2.3.14'
  - 'secure_firewall_threat_defense >= 6.3.0, < 6.3.0.3'
  - 'firepower_extensible_operating_system >= 2.0, < 2.2.2.101'
  - 'firepower_extensible_operating_system >= 2.3, < 2.3.1.155'
  - 'firepower_extensible_operating_system >= 2.4, < 2.4.1.238'
patched:
  - secure_firewall_threat_defense 6.3.0.3
  - firepower_extensible_operating_system 2.4.1.238
published: '2019-10-02'
updated: '2026-08-11'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2019-12699'
references:
  - url: >-
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fxos-cmd-inject
    label: psirt@cisco.com
  - url: >-
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fxos-cmd-inject
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00897
epssPercentile: 0.58094
ingestedAt: '2026-08-11T19:48:27.077Z'
---

## Overview

Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute commands on the underlying operating system (OS) with root privileges. These vulnerabilities are due to insufficient input validation. An attacker could exploit these vulnerabilities by including crafted arguments to specific CLI commands. A successful exploit could allow the attacker to execute commands on the underlying OS with root privileges.

## Affected

- `firepower_9300_firmware = 2.4(1.214)`
- `firepower_9300_firmware = 2.4(1.216)`
- `firepower_9300_firmware = 2.4(2.54)`
- `firepower_9300_firmware = r241`
- `secure_firewall_threat_defense <= 6.1.0`
- `secure_firewall_threat_defense >= 6.2.0, < 6.2.3.14`
- `secure_firewall_threat_defense >= 6.3.0, < 6.3.0.3`
- `firepower_extensible_operating_system >= 2.0, < 2.2.2.101`
- `firepower_extensible_operating_system >= 2.3, < 2.3.1.155`
- `firepower_extensible_operating_system >= 2.4, < 2.4.1.238`

## Remediation

Upgrade past the affected range:

- `secure_firewall_threat_defense 6.3.0.3`
- `firepower_extensible_operating_system 2.4.1.238`