Skip to content
fr Sign in
8.2 High

CVE-2019-12674 Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an…

Description

Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insufficient protections on the underlying filesystem. An attacker could exploit these vulnerabilities by modifying critical files on the underlying filesystem. A successful exploit could allow the attacker to execute commands with root privileges within the host namespace. This could allow the attacker to impact other running FTD instances.

Affected products and versions

Product Affected versions Fixed in
Cisco Firepower Threat Defense Software Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Firepower Threat Defense Software

The 162 CVEs of Cisco Firepower Threat Defense Software →
CVE-2025-20363 A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure… 9.0 Critical CVE-2025-20220 A vulnerability in the CLI of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat… 6.0 Medium CVE-2025-20268 A vulnerability in the Geolocation-Based Remote Access (RA) VPN feature of Cisco Secure Firewall Threat Defense (FTD)… 5.8 Medium CVE-2025-20254 A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security… 5.8 Medium
Track this CVE