Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-20340 (GCVE-0-2024-20340)
Vulnerability from cvelistv5 – Published: 2024-10-23 17:09 – Updated: 2026-03-04 17:23
VLAI?
EPSS
Summary
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, an attacker must have a valid account on the device with the role of Security Approver, Intrusion Admin, Access Admin, or Network Admin.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to read the contents of databases on the affected device and also obtain limited read access to the underlying operating system.
Severity ?
6.5 (Medium)
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Cisco | Cisco Secure Firewall Management Center (FMC) |
Affected:
7.0.0
Affected: 7.0.0.1 Affected: 7.0.1 Affected: 7.0.1.1 Affected: 7.0.2 Affected: 7.0.2.1 Affected: 7.0.3 Affected: 7.0.4 Affected: 7.0.5 Affected: 7.0.6 Affected: 7.0.6.1 Affected: 7.0.6.2 Affected: 7.1.0 Affected: 7.1.0.1 Affected: 7.1.0.2 Affected: 7.1.0.3 Affected: 7.2.0 Affected: 7.2.1 Affected: 7.2.2 Affected: 7.2.0.1 Affected: 7.2.3 Affected: 7.2.3.1 Affected: 7.2.4 Affected: 7.2.4.1 Affected: 7.2.5 Affected: 7.2.5.1 Affected: 7.2.6 Affected: 7.2.7 Affected: 7.2.5.2 Affected: 7.2.8 Affected: 7.2.8.1 Affected: 7.3.0 Affected: 7.3.1 Affected: 7.3.1.1 Affected: 7.3.1.2 Affected: 7.4.0 Affected: 7.4.1 Affected: 7.4.1.1 Affected: 7.4.2 Affected: 7.4.2.1 Affected: 7.4.2.2 Affected: 7.4.2.3 Affected: 7.4.2.4 Affected: 7.4.3 Affected: 7.6.0 Affected: 7.6.1 Affected: 7.6.2 Affected: 7.6.2.1 Affected: 7.6.3 Affected: 7.7.0 Affected: 7.7.10 Affected: 7.7.10.1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-20340",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-23T18:39:57.724507Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-10-24T17:48:12.904Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Cisco Secure Firewall Management Center (FMC)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "7.0.0.1"
},
{
"status": "affected",
"version": "7.0.1"
},
{
"status": "affected",
"version": "7.0.1.1"
},
{
"status": "affected",
"version": "7.0.2"
},
{
"status": "affected",
"version": "7.0.2.1"
},
{
"status": "affected",
"version": "7.0.3"
},
{
"status": "affected",
"version": "7.0.4"
},
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "7.0.6"
},
{
"status": "affected",
"version": "7.0.6.1"
},
{
"status": "affected",
"version": "7.0.6.2"
},
{
"status": "affected",
"version": "7.1.0"
},
{
"status": "affected",
"version": "7.1.0.1"
},
{
"status": "affected",
"version": "7.1.0.2"
},
{
"status": "affected",
"version": "7.1.0.3"
},
{
"status": "affected",
"version": "7.2.0"
},
{
"status": "affected",
"version": "7.2.1"
},
{
"status": "affected",
"version": "7.2.2"
},
{
"status": "affected",
"version": "7.2.0.1"
},
{
"status": "affected",
"version": "7.2.3"
},
{
"status": "affected",
"version": "7.2.3.1"
},
{
"status": "affected",
"version": "7.2.4"
},
{
"status": "affected",
"version": "7.2.4.1"
},
{
"status": "affected",
"version": "7.2.5"
},
{
"status": "affected",
"version": "7.2.5.1"
},
{
"status": "affected",
"version": "7.2.6"
},
{
"status": "affected",
"version": "7.2.7"
},
{
"status": "affected",
"version": "7.2.5.2"
},
{
"status": "affected",
"version": "7.2.8"
},
{
"status": "affected",
"version": "7.2.8.1"
},
{
"status": "affected",
"version": "7.3.0"
},
{
"status": "affected",
"version": "7.3.1"
},
{
"status": "affected",
"version": "7.3.1.1"
},
{
"status": "affected",
"version": "7.3.1.2"
},
{
"status": "affected",
"version": "7.4.0"
},
{
"status": "affected",
"version": "7.4.1"
},
{
"status": "affected",
"version": "7.4.1.1"
},
{
"status": "affected",
"version": "7.4.2"
},
{
"status": "affected",
"version": "7.4.2.1"
},
{
"status": "affected",
"version": "7.4.2.2"
},
{
"status": "affected",
"version": "7.4.2.3"
},
{
"status": "affected",
"version": "7.4.2.4"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.6.0"
},
{
"status": "affected",
"version": "7.6.1"
},
{
"status": "affected",
"version": "7.6.2"
},
{
"status": "affected",
"version": "7.6.2.1"
},
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "affected",
"version": "7.7.0"
},
{
"status": "affected",
"version": "7.7.10"
},
{
"status": "affected",
"version": "7.7.10.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, an attacker must have a valid account on the device with the role of Security Approver, Intrusion Admin, Access Admin, or Network Admin.\r\n\r This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to read the contents of databases on the affected device and also obtain limited read access to the underlying operating system."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-04T17:23:41.065Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-fmc-sql-inject-2EnmTC8v",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v"
}
],
"source": {
"advisory": "cisco-sa-fmc-sql-inject-2EnmTC8v",
"defects": [
"CSCwi23613",
"CSCwk27741",
"CSCwo50716"
],
"discovery": "INTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2024-20340",
"datePublished": "2024-10-23T17:09:10.266Z",
"dateReserved": "2023-11-08T15:08:07.642Z",
"dateUpdated": "2026-03-04T17:23:41.065Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DFA94312-376E-4785-888F-3C07612E1DF7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"29E73FBF-2579-4660-AFFA-7F9607004226\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"87FAAFFB-0589-441B-8289-8B8A6E18F705\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"73B92119-793D-4A43-A056-24DB6826E759\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"093A0BC2-037C-463F-AFC5-EF11C2954EAD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C4F434FC-CAA4-4DBB-8094-C4ECC28B31E7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"68C70BB3-33B3-4E7E-99D5-FF76D4ED96AE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B881B8DF-A96D-4B64-B98A-71F0D3388641\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F6A97625-D39C-42D5-89E4-415A868A0972\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5E4D83B4-9697-4071-AC9F-7ADC86A6B529\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8F81F708-ACED-4E42-8CA9-116B5C4F5141\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3C86116B-8475-40A0-A507-D4A7947F5F2C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A58A2DA5-3EE7-408D-AAFA-82330F0325B2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7FA98EEC-2059-4CA9-92F1-72C1E0BB7EC6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4C51EE7-866B-410C-B75E-EF260D5062B0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F1FFD07-B874-4D3C-8E2C-9A204F1E994E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FB5ACB9E-86AF-4EC1-9F36-A202429CD0F4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AD1E4527-AAE2-4DA9-AFDA-6375839F7843\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F0AF047-EAE9-4C77-BCEF-5CB26F84C742\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2ED03874-4071-4382-8A46-8B3A59E601FF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BF84E043-DF3C-4A95-8FDA-B0FDCD795377\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B9498087-9642-4A86-B3EE-1513C55A86E2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36C229AB-2851-48D4-815A-63AAB4462A24\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6DA4BCFC-8237-4F5C-9863-523EE7D8619B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"07693A92-7D84-45A1-ACD6-D83AE41D504B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2C78050A-A5FB-427B-BF0D-0353B240A4FF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"85E76AE7-12AC-4419-AE66-43730B173B4E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4D803EC9-26EE-4799-A435-C782C92739CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6EEF87CD-2335-4886-A65C-4E33775AEC52\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"953EB81A-1B53-4A57-9F59-D4A7D37E657E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1CB534BC-3E4D-4484-AFD0-69524B1F07F9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5D401072-6709-4921-8918-720F28D61E24\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C0EA3467-4205-4C41-AF24-689330F7396B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9BE94E38-5F29-4AE1-8129-7F7582C2CC75\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FEF603AD-D69B-4DD8-A7F4-6BEFD355EF29\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.4.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D6BD1665-7824-4D98-A930-432CBDA4EAD5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F8056E69-22FA-4935-A576-916805D90C62\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6A80BBBE-DB5E-460A-8621-6E28D2BD6E44\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2B33F953-FEF3-4C46-A12A-2A42D8339D6E\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, an attacker must have a valid account on the device with the role of Security Approver, Intrusion Admin, Access Admin, or Network Admin.\\r\\n\\r\\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to read the contents of databases on the affected device and also obtain limited read access to the underlying operating system.\"}, {\"lang\": \"es\", \"value\": \"Una vulnerabilidad en la interfaz de administraci\\u00f3n basada en web del software Cisco Secure Firewall Management Center (FMC), anteriormente Firepower Management Center Software, podr\\u00eda permitir que un atacante remoto autenticado realice un ataque de inyecci\\u00f3n SQL contra un dispositivo afectado. Para aprovechar esta vulnerabilidad, un atacante debe tener una cuenta v\\u00e1lida en el dispositivo con el rol de aprobador de seguridad, administrador de intrusiones, administrador de acceso o administrador de red. Esta vulnerabilidad se debe a una validaci\\u00f3n insuficiente de la entrada proporcionada por el usuario. Un atacante podr\\u00eda aprovechar esta vulnerabilidad enviando una solicitud HTTP manipulada a la interfaz de administraci\\u00f3n basada en web de un dispositivo afectado. Una explotaci\\u00f3n exitosa podr\\u00eda permitir al atacante leer el contenido de las bases de datos en el dispositivo afectado y tambi\\u00e9n obtener acceso de lectura limitado al sistema operativo subyacente.\"}]",
"id": "CVE-2024-20340",
"lastModified": "2024-11-01T17:40:30.980",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"ykramarz@cisco.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}]}",
"published": "2024-10-23T17:15:18.300",
"references": "[{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-M446vbEO\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Broken Link\"]}, {\"url\": \"https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75300\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Vendor Advisory\"]}]",
"sourceIdentifier": "ykramarz@cisco.com",
"vulnStatus": "Analyzed",
"weaknesses": "[{\"source\": \"ykramarz@cisco.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-89\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-89\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-20340\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2024-10-23T17:15:18.300\",\"lastModified\":\"2026-03-04T18:16:10.040\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, an attacker must have a valid account on the device with the role of Security Approver, Intrusion Admin, Access Admin, or Network Admin.\\r\\n\\r This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to read the contents of databases on the affected device and also obtain limited read access to the underlying operating system.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web del software Cisco Secure Firewall Management Center (FMC), anteriormente Firepower Management Center Software, podr\u00eda permitir que un atacante remoto autenticado realice un ataque de inyecci\u00f3n SQL contra un dispositivo afectado. Para aprovechar esta vulnerabilidad, un atacante debe tener una cuenta v\u00e1lida en el dispositivo con el rol de aprobador de seguridad, administrador de intrusiones, administrador de acceso o administrador de red. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de la entrada proporcionada por el usuario. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando una solicitud HTTP manipulada a la interfaz de administraci\u00f3n basada en web de un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante leer el contenido de las bases de datos en el dispositivo afectado y tambi\u00e9n obtener acceso de lectura limitado al sistema operativo subyacente.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-89\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-89\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DFA94312-376E-4785-888F-3C07612E1DF7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"29E73FBF-2579-4660-AFFA-7F9607004226\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87FAAFFB-0589-441B-8289-8B8A6E18F705\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73B92119-793D-4A43-A056-24DB6826E759\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"093A0BC2-037C-463F-AFC5-EF11C2954EAD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4F434FC-CAA4-4DBB-8094-C4ECC28B31E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"68C70BB3-33B3-4E7E-99D5-FF76D4ED96AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B881B8DF-A96D-4B64-B98A-71F0D3388641\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6A97625-D39C-42D5-89E4-415A868A0972\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E4D83B4-9697-4071-AC9F-7ADC86A6B529\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F81F708-ACED-4E42-8CA9-116B5C4F5141\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C86116B-8475-40A0-A507-D4A7947F5F2C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A58A2DA5-3EE7-408D-AAFA-82330F0325B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7FA98EEC-2059-4CA9-92F1-72C1E0BB7EC6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4C51EE7-866B-410C-B75E-EF260D5062B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F1FFD07-B874-4D3C-8E2C-9A204F1E994E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB5ACB9E-86AF-4EC1-9F36-A202429CD0F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD1E4527-AAE2-4DA9-AFDA-6375839F7843\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F0AF047-EAE9-4C77-BCEF-5CB26F84C742\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2ED03874-4071-4382-8A46-8B3A59E601FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF84E043-DF3C-4A95-8FDA-B0FDCD795377\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9498087-9642-4A86-B3EE-1513C55A86E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36C229AB-2851-48D4-815A-63AAB4462A24\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6DA4BCFC-8237-4F5C-9863-523EE7D8619B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07693A92-7D84-45A1-ACD6-D83AE41D504B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C78050A-A5FB-427B-BF0D-0353B240A4FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85E76AE7-12AC-4419-AE66-43730B173B4E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D803EC9-26EE-4799-A435-C782C92739CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6EEF87CD-2335-4886-A65C-4E33775AEC52\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"953EB81A-1B53-4A57-9F59-D4A7D37E657E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CB534BC-3E4D-4484-AFD0-69524B1F07F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D401072-6709-4921-8918-720F28D61E24\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0EA3467-4205-4C41-AF24-689330F7396B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BE94E38-5F29-4AE1-8129-7F7582C2CC75\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FEF603AD-D69B-4DD8-A7F4-6BEFD355EF29\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6BD1665-7824-4D98-A930-432CBDA4EAD5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8056E69-22FA-4935-A576-916805D90C62\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A80BBBE-DB5E-460A-8621-6E28D2BD6E44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B33F953-FEF3-4C46-A12A-2A42D8339D6E\"}]}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-20340\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-23T18:39:57.724507Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-23T18:51:53.342Z\"}}], \"cna\": {\"source\": {\"defects\": [\"CSCwi23613\", \"CSCwk27741\", \"CSCwo50716\"], \"advisory\": \"cisco-sa-fmc-sql-inject-2EnmTC8v\", \"discovery\": \"INTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Secure Firewall Management Center (FMC)\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.0.0\"}, {\"status\": \"affected\", \"version\": \"7.0.0.1\"}, {\"status\": \"affected\", \"version\": \"7.0.1\"}, {\"status\": \"affected\", \"version\": \"7.0.1.1\"}, {\"status\": \"affected\", \"version\": \"7.0.2\"}, {\"status\": \"affected\", \"version\": \"7.0.2.1\"}, {\"status\": \"affected\", \"version\": \"7.0.3\"}, {\"status\": \"affected\", \"version\": \"7.0.4\"}, {\"status\": \"affected\", \"version\": \"7.0.5\"}, {\"status\": \"affected\", \"version\": \"7.0.6\"}, {\"status\": \"affected\", \"version\": \"7.0.6.1\"}, {\"status\": \"affected\", \"version\": \"7.0.6.2\"}, {\"status\": \"affected\", \"version\": \"7.1.0\"}, {\"status\": \"affected\", \"version\": \"7.1.0.1\"}, {\"status\": \"affected\", \"version\": \"7.1.0.2\"}, {\"status\": \"affected\", \"version\": \"7.1.0.3\"}, {\"status\": \"affected\", \"version\": \"7.2.0\"}, {\"status\": \"affected\", \"version\": \"7.2.1\"}, {\"status\": \"affected\", \"version\": \"7.2.2\"}, {\"status\": \"affected\", \"version\": \"7.2.0.1\"}, {\"status\": \"affected\", \"version\": \"7.2.3\"}, {\"status\": \"affected\", \"version\": \"7.2.3.1\"}, {\"status\": \"affected\", \"version\": \"7.2.4\"}, {\"status\": \"affected\", \"version\": \"7.2.4.1\"}, {\"status\": \"affected\", \"version\": \"7.2.5\"}, {\"status\": \"affected\", \"version\": \"7.2.5.1\"}, {\"status\": \"affected\", \"version\": \"7.2.6\"}, {\"status\": \"affected\", \"version\": \"7.2.7\"}, {\"status\": \"affected\", \"version\": \"7.2.5.2\"}, {\"status\": \"affected\", \"version\": \"7.2.8\"}, {\"status\": \"affected\", \"version\": \"7.2.8.1\"}, {\"status\": \"affected\", \"version\": \"7.3.0\"}, {\"status\": \"affected\", \"version\": \"7.3.1\"}, {\"status\": \"affected\", \"version\": \"7.3.1.1\"}, {\"status\": \"affected\", \"version\": \"7.3.1.2\"}, {\"status\": \"affected\", \"version\": \"7.4.0\"}, {\"status\": \"affected\", \"version\": \"7.4.1\"}, {\"status\": \"affected\", \"version\": \"7.4.1.1\"}, {\"status\": \"affected\", \"version\": \"7.4.2\"}, {\"status\": \"affected\", \"version\": \"7.4.2.1\"}, {\"status\": \"affected\", \"version\": \"7.4.2.2\"}, {\"status\": \"affected\", \"version\": \"7.4.2.3\"}, {\"status\": \"affected\", \"version\": \"7.4.2.4\"}, {\"status\": \"affected\", \"version\": \"7.4.3\"}, {\"status\": \"affected\", \"version\": \"7.6.0\"}, {\"status\": \"affected\", \"version\": \"7.6.1\"}, {\"status\": \"affected\", \"version\": \"7.6.2\"}, {\"status\": \"affected\", \"version\": \"7.6.2.1\"}, {\"status\": \"affected\", \"version\": \"7.6.3\"}, {\"status\": \"affected\", \"version\": \"7.7.0\"}, {\"status\": \"affected\", \"version\": \"7.7.10\"}, {\"status\": \"affected\", \"version\": \"7.7.10.1\"}]}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v\", \"name\": \"cisco-sa-fmc-sql-inject-2EnmTC8v\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, an attacker must have a valid account on the device with the role of Security Approver, Intrusion Admin, Access Admin, or Network Admin.\\r\\n\\r This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to read the contents of databases on the affected device and also obtain limited read access to the underlying operating system.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-89\", \"description\": \"Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2026-03-04T17:23:41.065Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-20340\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-03-04T17:23:41.065Z\", \"dateReserved\": \"2023-11-08T15:08:07.642Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2024-10-23T17:09:10.266Z\", \"assignerShortName\": \"cisco\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
NCSC-2026-0077
Vulnerability from csaf_ncscnl - Published: 2026-03-05 09:05 - Updated: 2026-03-05 09:05Summary
Kwetsbaarheden verholpen in Cisco Secure Firewall systemen
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Secure Firewall (inclusief ASA en FTD software).
Interpretaties: De kwetsbaarheden omvatten SQL-injectie, privilege-escalatie, denial-of-service, cross-site scripting, en onjuist beheer van invoer in verschillende componenten van de Cisco Secure Firewall. Authenticated remote attackers kunnen deze kwetsbaarheden misbruiken om ongeautoriseerde toegang te krijgen, systeemintegriteit te compromitteren, of netwerkdiensten te verstoren. De kwetsbaarheden zijn aanwezig in de webinterfaces, REST API's, en andere functionaliteiten van de firewall software.
Oplossingen: Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-20: Improper Input Validation
CWE-27: Path Traversal: 'dir/../../filename'
CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-131: Incorrect Calculation of Buffer Size
CWE-138: Improper Neutralization of Special Elements
CWE-190: Integer Overflow or Wraparound
CWE-244: Improper Clearing of Heap Memory Before Release ('Heap Inspection')
CWE-248: Uncaught Exception
CWE-250: Execution with Unnecessary Privileges
CWE-269: Improper Privilege Management
CWE-279: Incorrect Execution-Assigned Permissions
CWE-284: Improper Access Control
CWE-330: Use of Insufficiently Random Values
CWE-388: CWE-388
CWE-401: Missing Release of Memory after Effective Lifetime
CWE-404: Improper Resource Shutdown or Release
CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CWE-476: NULL Pointer Dereference
CWE-770: Allocation of Resources Without Limits or Throttling
CWE-772: Missing Release of Resource after Effective Lifetime
CWE-787: Out-of-bounds Write
CWE-788: Access of Memory Location After End of Buffer
CWE-823: Use of Out-of-range Pointer Offset
Multiple vulnerabilities in Cisco products, including an SQL injection flaw in Cisco Secure Firewall Management Center, allow authenticated users or remote attackers to perform actions such as SQL injection, denial of service, privilege escalation, remote code execution, and information disclosure.
6.5 (Medium)
A vulnerability in Cisco ASA and Firepower Threat Defense restore functionality allows an authenticated local attacker with administrator privileges to execute arbitrary root-level commands by restoring a crafted backup file due to improper sanitization.
6.0 (Medium)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software, including in the SAML 2.0 SSO and Remote Access SSL VPN features, allow unauthenticated remote attackers to cause device reloads and denial of service via crafted messages.
8.6 (High)
A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an unauthenticated adjacent attacker to cause device reload and denial of service by sending crafted OSPF update packets, requiring the secret key if OSPF authentication is enabled.
6.8 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD software allows unauthenticated remote attackers to bypass access controls by exploiting improper error handling during memory exhaustion in cluster replication, enabling unauthorized network traffic.
5.8 (Medium)
A logic error in Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to bypass Snort rules and send unauthorized network traffic.
5.8 (Medium)
A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center and Threat Defense Software allows an authenticated remote attacker with admin privileges to write arbitrary root files on the operating system by exploiting insufficient directory path validation during file synchronization.
5.9 (Medium)
Multiple SQL injection vulnerabilities in Cisco Secure FMC Software and Cisco Secure Firewall Management Center's web interfaces and REST APIs allow authenticated remote attackers to access databases and certain OS files.
8.1 (High)
A memory leak vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to cause a denial-of-service condition, disrupting network availability and requiring manual device reload.
5.8 (Medium)
A vulnerability in Cisco Secure Firewall ASA Software's CLI allows an authenticated admin user in one context to copy files, including sensitive configurations, to or from another context due to improper SCP access controls requiring valid credentials and exact file paths.
7.2 (High)
A vulnerability in ClamAV's CSS module allows unauthenticated remote attackers to cause a denial of service by exploiting improper UTF-8 string error handling.
5.3 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD VPN web server allows unauthenticated remote attackers to cause denial of service by sending crafted HTTP requests, resulting in device reloads.
8.6 (High)
A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an unauthenticated adjacent attacker to cause device reloads and denial of service when OSPF canonicalization debug is enabled due to insufficient input validation of OSPF LSU packets.
6.1 (Medium)
A vulnerability in Cisco Secure Firewall Threat Defense Software's Do Not Decrypt exclusion feature allows an unauthenticated remote attacker to cause denial of service by sending crafted TLS 1.2 encrypted traffic, resulting in device reloads.
6.8 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services enables unauthenticated remote attackers to conduct browser-based cross-site scripting attacks by exploiting improper HTTP request validation.
4.3 (Medium)
A vulnerability in Cisco Secure Firewall ASA's SSH key-based authentication allows an unauthenticated remote attacker with a valid username and public key to log in and execute commands as that user without the private key, excluding root access.
5.3 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD Software's IKEv2 feature allows authenticated remote attackers with valid VPN credentials to cause denial-of-service by sending crafted packets that may exhaust memory and trigger device reloads.
7.7 (High)
Multiple vulnerabilities in Cisco FXOS, Secure Firewall ASA, and FTD Software CLI features allow authenticated local attackers with administrative credentials to execute arbitrary commands with root or elevated privileges or cause device reloads due to insufficient input validation.
6.0 (Medium)
A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD software allows an authenticated, adjacent attacker to send crafted packets that exhaust device memory, causing a denial of service.
4.3 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD software's handling of GCM-encrypted IKEv2 IPsec traffic allows an authenticated attacker with VPN credentials to cause a denial of service by triggering an unexpected device reload due to insufficient memory allocation.
7.7 (High)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow authenticated remote attackers to exhaust device memory, causing denial of service or device reloads.
7.7 (High)
A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause device reload and denial of service via crafted OSPF LSU packets exploiting insufficient input validation.
6.8 (Medium)
A vulnerability in Cisco Secure Firewall ASA Software's handling of embryonic connection limits during TCP SYN flood attacks can cause legitimate TCP SYN packets to be dropped, resulting in denial of service.
8.6 (High)
A vulnerability in the TLS cryptography of the Snort 3 Detection Engine in Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to cause unexpected restarts and denial of service, with TLS 1.3 unaffected.
5.8 (Medium)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow unauthenticated remote attackers to exhaust device memory, causing denial of service and potentially making the web interface unresponsive.
8.6 (High)
A vulnerability in Cisco Secure Firewall ASA and FTD CLI commands allows an authenticated local attacker with Administrator credentials to execute arbitrary Lua code as root due to improper input sanitization.
6.0 (Medium)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.
6.0 (Medium)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD software's Remote Access SSL VPN, HTTP management, and MUS functionality allow unauthenticated remote attackers to exhaust device memory, causing denial of service and requiring manual reboot.
5.3 (Medium)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.
6.0 (Medium)
Multiple vulnerabilities in the Remote Access SSL VPN feature of Cisco Secure Firewall ASA and FTD, including a LUA interpreter flaw, allow authenticated remote attackers to cause device reloads and denial of service.
7.7 (High)
A vulnerability in Cisco Secure Firewall Management Center allows an authenticated local attacker with administrative credentials to execute arbitrary root commands by exploiting insufficient restrictions on remediation modules in lockdown mode.
6.0 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD Software's OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause heap corruption via crafted packets, resulting in device reloads and denial-of-service.
6.8 (Medium)
Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software allow authenticated local attackers with low privileges to cause device reloads or execute commands with elevated privileges, resulting in denial of service or privilege escalation.
6.5 (Medium)
A vulnerability in Cisco ASA and FTD software's OSPF protocol allows an unauthenticated adjacent attacker to cause memory corruption and denial of service by sending crafted OSPF packets.
6.1 (Medium)
Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and OS files.
4.9 (Medium)
A reflected cross-site scripting (XSS) vulnerability in the SAML 2.0 SSO feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to exploit insufficient input validation of HTTP parameters.
6.1 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD Software's IKEv2 feature allows unauthenticated remote attackers to cause denial-of-service by exhausting memory with crafted packets, potentially requiring manual device reload.
5.8 (Medium)
A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services allows unauthenticated remote attackers to perform cross-site scripting (XSS) via improper input validation in HTTP requests, potentially enabling arbitrary code execution in users' browsers.
6.1 (Medium)
Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and certain OS files.
6.5 (Medium)
A logic error in memory management during Snort 3 SSL packet inspection in Cisco Secure Firewall Threat Defense Software can allow an unauthenticated remote attacker to cause the Snort 3 Detection Engine to restart, resulting in a denial of service.
5.8 (Medium)
References
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Secure Firewall (inclusief ASA en FTD software).",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden omvatten SQL-injectie, privilege-escalatie, denial-of-service, cross-site scripting, en onjuist beheer van invoer in verschillende componenten van de Cisco Secure Firewall. Authenticated remote attackers kunnen deze kwetsbaarheden misbruiken om ongeautoriseerde toegang te krijgen, systeemintegriteit te compromitteren, of netwerkdiensten te verstoren. De kwetsbaarheden zijn aanwezig in de webinterfaces, REST API\u0027s, en andere functionaliteiten van de firewall software.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Path Traversal: \u0027dir/../../filename\u0027",
"title": "CWE-27"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
"title": "CWE-77"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
"title": "CWE-80"
},
{
"category": "general",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "general",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "general",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "general",
"text": "Incorrect Calculation of Buffer Size",
"title": "CWE-131"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements",
"title": "CWE-138"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)",
"title": "CWE-244"
},
{
"category": "general",
"text": "Uncaught Exception",
"title": "CWE-248"
},
{
"category": "general",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "general",
"text": "Improper Privilege Management",
"title": "CWE-269"
},
{
"category": "general",
"text": "Incorrect Execution-Assigned Permissions",
"title": "CWE-279"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "general",
"text": "CWE-388",
"title": "CWE-388"
},
{
"category": "general",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "general",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "general",
"text": "Missing Release of Resource after Effective Lifetime",
"title": "CWE-772"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Access of Memory Location After End of Buffer",
"title": "CWE-788"
},
{
"category": "general",
"text": "Use of Out-of-range Pointer Offset",
"title": "CWE-823"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-dos-FCvLD6vR"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-scpcxt-filecpy-rgeP73nE"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ssh-keybypass-cr5xPUSf"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-aclbypass-dos-CVxVRSvQ"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-cmd-inj-ZJV8Wysm"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-desync-n5AVzEQw"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-esp-dos-uv7yD8P5"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-luainject-VescqgmS"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-saml-LktTrwZP"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-SpOFF2Re"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-m9sx6MbC"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-xss-uwjc4HR"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-css-Fn4QSZ"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmd-inj-mTzGZexf"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-dnd-dos-bpEcg7B7"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort-bypass-rLggKzVF"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-snort3ssl-FBEKYXpH"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-tcp-dos-rHfqnwRg"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdfmc-dir-trav-wERgjhWq"
},
{
"category": "external",
"summary": "Reference",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2"
}
],
"title": "Kwetsbaarheden verholpen in Cisco Secure Firewall systemen",
"tracking": {
"current_release_date": "2026-03-05T09:05:21.646499Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0077",
"initial_release_date": "2026-03-05T09:05:21.646499Z",
"revision_history": [
{
"date": "2026-03-05T09:05:21.646499Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "Adaptive Security Appliance"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "Cisco 3000 Series Industrial Security Appliances (ISA)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-3"
}
}
],
"category": "product_name",
"name": "Cisco ASA 5500-X Series Firewalls"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-4"
}
}
],
"category": "product_name",
"name": "Cisco Adaptive Security Virtual Appliance (ASAv)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-5"
}
}
],
"category": "product_name",
"name": "Cisco Firepower 1000 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-6"
}
}
],
"category": "product_name",
"name": "Cisco Firepower 2100 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-7"
}
}
],
"category": "product_name",
"name": "Cisco Firepower 9000 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-8"
}
}
],
"category": "product_name",
"name": "Cisco Secure Endpoint"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-9"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall 3100 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-10"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall 4200 Series"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-11"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-12"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Management Center"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-13"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Management Center (FMC)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-14"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Management Center (FMC) Appliances"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-15"
}
}
],
"category": "product_name",
"name": "Cisco Secure Firewall Threat Defense (FTD) Software"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-16"
}
}
],
"category": "product_name",
"name": "Firepower Management Center"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-17"
}
}
],
"category": "product_name",
"name": "Firepower Threat Defense"
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-20340",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco products, including an SQL injection flaw in Cisco Secure Firewall Management Center, allow authenticated users or remote attackers to perform actions such as SQL injection, denial of service, privilege escalation, remote code execution, and information disclosure.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-20340 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-20340.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2024-20340"
},
{
"cve": "CVE-2024-20358",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "A vulnerability in Cisco ASA and Firepower Threat Defense restore functionality allows an authenticated local attacker with administrator privileges to execute arbitrary root-level commands by restoring a crafted backup file due to improper sanitization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-20358 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-20358.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2024-20358"
},
{
"cve": "CVE-2026-20101",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"notes": [
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software, including in the SAML 2.0 SSO and Remote Access SSL VPN features, allow unauthenticated remote attackers to cause device reloads and denial of service via crafted messages.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20101 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20101.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20101"
},
{
"cve": "CVE-2026-20020",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an unauthenticated adjacent attacker to cause device reload and denial of service by sending crafted OSPF update packets, requiring the secret key if OSPF authentication is enabled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20020 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20020.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20020"
},
{
"cve": "CVE-2026-20073",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD software allows unauthenticated remote attackers to bypass access controls by exploiting improper error handling during memory exhaustion in cluster replication, enabling unauthorized network traffic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20073 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20073.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20073"
},
{
"cve": "CVE-2026-20007",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "description",
"text": "A logic error in Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to bypass Snort rules and send unauthorized network traffic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20007 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20007.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20007"
},
{
"cve": "CVE-2026-20018",
"cwe": {
"id": "CWE-27",
"name": "Path Traversal: \u0027dir/../../filename\u0027"
},
"notes": [
{
"category": "other",
"text": "Path Traversal: \u0027dir/../../filename\u0027",
"title": "CWE-27"
},
{
"category": "description",
"text": "A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center and Threat Defense Software allows an authenticated remote attacker with admin privileges to write arbitrary root files on the operating system by exploiting insufficient directory path validation during file synchronization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20018 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20018.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20018"
},
{
"cve": "CVE-2026-20002",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "description",
"text": "Multiple SQL injection vulnerabilities in Cisco Secure FMC Software and Cisco Secure Firewall Management Center\u0027s web interfaces and REST APIs allow authenticated remote attackers to access databases and certain OS files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20002 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20002.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20002"
},
{
"cve": "CVE-2026-20015",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "A memory leak vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to cause a denial-of-service condition, disrupting network availability and requiring manual device reload.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20015 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20015.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20015"
},
{
"cve": "CVE-2026-20062",
"cwe": {
"id": "CWE-279",
"name": "Incorrect Execution-Assigned Permissions"
},
"notes": [
{
"category": "other",
"text": "Incorrect Execution-Assigned Permissions",
"title": "CWE-279"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA Software\u0027s CLI allows an authenticated admin user in one context to copy files, including sensitive configurations, to or from another context due to improper SCP access controls requiring valid credentials and exact file paths.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20062 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20062.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20062"
},
{
"cve": "CVE-2026-20031",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"notes": [
{
"category": "other",
"text": "Uncaught Exception",
"title": "CWE-248"
},
{
"category": "description",
"text": "A vulnerability in ClamAV\u0027s CSS module allows unauthenticated remote attackers to cause a denial of service by exploiting improper UTF-8 string error handling.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20031 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20031.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20031"
},
{
"cve": "CVE-2026-20039",
"cwe": {
"id": "CWE-244",
"name": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)",
"title": "CWE-244"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD VPN web server allows unauthenticated remote attackers to cause denial of service by sending crafted HTTP requests, resulting in device reloads.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20039 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20039.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20039"
},
{
"cve": "CVE-2026-20022",
"cwe": {
"id": "CWE-823",
"name": "Use of Out-of-range Pointer Offset"
},
"notes": [
{
"category": "other",
"text": "Use of Out-of-range Pointer Offset",
"title": "CWE-823"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an unauthenticated adjacent attacker to cause device reloads and denial of service when OSPF canonicalization debug is enabled due to insufficient input validation of OSPF LSU packets.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20022 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20022.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20022"
},
{
"cve": "CVE-2026-20050",
"cwe": {
"id": "CWE-404",
"name": "Improper Resource Shutdown or Release"
},
"notes": [
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall Threat Defense Software\u0027s Do Not Decrypt exclusion feature allows an unauthenticated remote attacker to cause denial of service by sending crafted TLS 1.2 encrypted traffic, resulting in device reloads.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20050 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20050.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20050"
},
{
"cve": "CVE-2026-20069",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "other",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
"title": "CWE-444"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services enables unauthenticated remote attackers to conduct browser-based cross-site scripting attacks by exploiting improper HTTP request validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20069 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20069.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20069"
},
{
"cve": "CVE-2026-20009",
"cwe": {
"id": "CWE-138",
"name": "Improper Neutralization of Special Elements"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements",
"title": "CWE-138"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA\u0027s SSH key-based authentication allows an unauthenticated remote attacker with a valid username and public key to log in and execute commands as that user without the private key, excluding root access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20009 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20009.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20009"
},
{
"cve": "CVE-2026-20014",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s IKEv2 feature allows authenticated remote attackers with valid VPN credentials to cause denial-of-service by sending crafted packets that may exhaust memory and trigger device reloads.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20014 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20014.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20014"
},
{
"cve": "CVE-2026-20016",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"notes": [
{
"category": "other",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco FXOS, Secure Firewall ASA, and FTD Software CLI features allow authenticated local attackers with administrative credentials to execute arbitrary commands with root or elevated privileges or cause device reloads due to insufficient input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20016 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20016.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20016"
},
{
"cve": "CVE-2026-20021",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA and FTD software allows an authenticated, adjacent attacker to send crafted packets that exhaust device memory, causing a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20021 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20021.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20021"
},
{
"cve": "CVE-2026-20049",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"notes": [
{
"category": "other",
"text": "Incorrect Calculation of Buffer Size",
"title": "CWE-131"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD software\u0027s handling of GCM-encrypted IKEv2 IPsec traffic allows an authenticated attacker with VPN credentials to cause a denial of service by triggering an unexpected device reload due to insufficient memory allocation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20049 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20049.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20049"
},
{
"cve": "CVE-2026-20105",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow authenticated remote attackers to exhaust device memory, causing denial of service or device reloads.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20105 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20105.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20105"
},
{
"cve": "CVE-2026-20025",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause device reload and denial of service via crafted OSPF LSU packets exploiting insufficient input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20025 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20025.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20025"
},
{
"cve": "CVE-2026-20082",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Resource after Effective Lifetime",
"title": "CWE-772"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA Software\u0027s handling of embryonic connection limits during TCP SYN flood attacks can cause legitimate TCP SYN packets to be dropped, resulting in denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20082 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20082.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20082"
},
{
"cve": "CVE-2026-20006",
"cwe": {
"id": "CWE-388",
"name": "-"
},
"notes": [
{
"category": "other",
"text": "CWE-388",
"title": "CWE-388"
},
{
"category": "description",
"text": "A vulnerability in the TLS cryptography of the Snort 3 Detection Engine in Cisco Secure Firewall Threat Defense Software allows unauthenticated remote attackers to cause unexpected restarts and denial of service, with TLS 1.3 unaffected.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20006 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20006.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20006"
},
{
"cve": "CVE-2026-20103",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Remote Access SSL VPN allow unauthenticated remote attackers to exhaust device memory, causing denial of service and potentially making the web interface unresponsive.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20103 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20103.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20103"
},
{
"cve": "CVE-2026-20008",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD CLI commands allows an authenticated local attacker with Administrator credentials to execute arbitrary Lua code as root due to improper input sanitization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20008 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20008.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20008"
},
{
"cve": "CVE-2026-20063",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"notes": [
{
"category": "other",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20063 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20063.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20063"
},
{
"cve": "CVE-2026-20106",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD software\u0027s Remote Access SSL VPN, HTTP management, and MUS functionality allow unauthenticated remote attackers to exhaust device memory, causing denial of service and requiring manual reboot.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20106 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20106.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20106"
},
{
"cve": "CVE-2026-20017",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"notes": [
{
"category": "other",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software CLI allow authenticated local attackers with administrative credentials to execute arbitrary root commands or cause device reloads due to insufficient input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20017 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20017.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20017"
},
{
"cve": "CVE-2026-20100",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "other",
"text": "Use of Insufficiently Random Values",
"title": "CWE-330"
},
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "other",
"text": "Allocation of Resources Without Limits or Throttling",
"title": "CWE-770"
},
{
"category": "description",
"text": "Multiple vulnerabilities in the Remote Access SSL VPN feature of Cisco Secure Firewall ASA and FTD, including a LUA interpreter flaw, allow authenticated remote attackers to cause device reloads and denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20100 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20100.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20100"
},
{
"cve": "CVE-2026-20044",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"notes": [
{
"category": "other",
"text": "Improper Privilege Management",
"title": "CWE-269"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall Management Center allows an authenticated local attacker with administrative credentials to execute arbitrary root commands by exploiting insufficient restrictions on remediation modules in lockdown mode.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20044 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20044.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20044"
},
{
"cve": "CVE-2026-20024",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s OSPF protocol allows an authenticated adjacent attacker with the OSPF secret key to cause heap corruption via crafted packets, resulting in device reloads and denial-of-service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20024 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20024.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20024"
},
{
"cve": "CVE-2026-20064",
"cwe": {
"id": "CWE-250",
"name": "Execution with Unnecessary Privileges"
},
"notes": [
{
"category": "other",
"text": "Execution with Unnecessary Privileges",
"title": "CWE-250"
},
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "Multiple vulnerabilities in Cisco Secure Firewall ASA and FTD Software allow authenticated local attackers with low privileges to cause device reloads or execute commands with elevated privileges, resulting in denial of service or privilege escalation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20064 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20064.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20064"
},
{
"cve": "CVE-2026-20023",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "A vulnerability in Cisco ASA and FTD software\u0027s OSPF protocol allows an unauthenticated adjacent attacker to cause memory corruption and denial of service by sending crafted OSPF packets.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20023 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20023.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20023"
},
{
"cve": "CVE-2026-20003",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "description",
"text": "Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and OS files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20003 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20003.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20003"
},
{
"cve": "CVE-2026-20102",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "A reflected cross-site scripting (XSS) vulnerability in the SAML 2.0 SSO feature of Cisco Secure Firewall ASA and FTD Software allows unauthenticated remote attackers to exploit insufficient input validation of HTTP parameters.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20102 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20102.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20102"
},
{
"cve": "CVE-2026-20013",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "other",
"text": "Missing Release of Memory after Effective Lifetime",
"title": "CWE-401"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD Software\u0027s IKEv2 feature allows unauthenticated remote attackers to cause denial-of-service by exhausting memory with crafted packets, potentially requiring manual device reload.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20013 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20013.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20013"
},
{
"cve": "CVE-2026-20070",
"cwe": {
"id": "CWE-80",
"name": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
"title": "CWE-80"
},
{
"category": "description",
"text": "A vulnerability in Cisco Secure Firewall ASA and FTD VPN web services allows unauthenticated remote attackers to perform cross-site scripting (XSS) via improper input validation in HTTP requests, potentially enabling arbitrary code execution in users\u0027 browsers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20070 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20070.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20070"
},
{
"cve": "CVE-2026-20001",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "description",
"text": "Multiple SQL injection vulnerabilities in the REST API and web-based management interface of Cisco Secure Firewall Management Center Software allow authenticated remote attackers with specific roles to access database and certain OS files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20001 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20001.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20001"
},
{
"cve": "CVE-2026-20052",
"cwe": {
"id": "CWE-788",
"name": "Access of Memory Location After End of Buffer"
},
"notes": [
{
"category": "other",
"text": "Access of Memory Location After End of Buffer",
"title": "CWE-788"
},
{
"category": "description",
"text": "A logic error in memory management during Snort 3 SSL packet inspection in Cisco Secure Firewall Threat Defense Software can allow an unauthenticated remote attacker to cause the Snort 3 Detection Engine to restart, resulting in a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20052 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20052.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4",
"CSAFPID-5",
"CSAFPID-6",
"CSAFPID-7",
"CSAFPID-8",
"CSAFPID-9",
"CSAFPID-10",
"CSAFPID-11",
"CSAFPID-12",
"CSAFPID-13",
"CSAFPID-14",
"CSAFPID-15",
"CSAFPID-16",
"CSAFPID-17"
]
}
],
"title": "CVE-2026-20052"
}
]
}
WID-SEC-W-2024-3267
Vulnerability from csaf_certbund - Published: 2024-10-23 22:00 - Updated: 2024-10-23 22:00Summary
Cisco Secure Firewall Management Center: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Das Cisco Secure Firewall Management Center ist eine zentralisierte Plattform, die eine Verwaltung und Überwachung von Cisco Firewall-Geräten ermöglicht.
Angriff: Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Cisco Secure Firewall Management Center ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, Daten zu manipulieren und erhöhte Rechte zu erlangen.
Betroffene Betriebssysteme: - CISCO Appliance
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsoberfläche und die Kennwortverwaltung aufgrund eines Logikfehlers bei Kennwortaktualisierungen und einer unzureichenden Validierung der vom Benutzer bereitgestellten Eingaben. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um vertrauliche Informationen preiszugeben, insbesondere um konfigurierte Benutzernamen zu ermitteln und beliebige Dateien auf dem zugrunde liegenden Betriebssystem des betroffenen Geräts zu lesen.
Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsoberfläche und die Kennwortverwaltung aufgrund eines Logikfehlers bei Kennwortaktualisierungen und einer unzureichenden Validierung der vom Benutzer bereitgestellten Eingaben. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um vertrauliche Informationen preiszugeben, insbesondere um konfigurierte Benutzernamen zu ermitteln und beliebige Dateien auf dem zugrunde liegenden Betriebssystem des betroffenen Geräts zu lesen.
Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die Cluster-Backup-Funktion und die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Eingabevalidierung bestimmter HTTP-Anfragen und Benutzerdaten. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, sogar mit Root-Rechten. Um die Schwachstellen auszunutzen, muss der Angreifer über eine bestimmte Rolle oder erhöhte Rechte verfügen. Eine der Schwachstellen erfordert eine Benutzerinteraktion, um erfolgreich ausgenutzt zu werden, muss der Angreifer einen legitimen Benutzer überzeugen, ein Cluster-Backup zu initiieren.
Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die Cluster-Backup-Funktion und die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Eingabevalidierung bestimmter HTTP-Anfragen und Benutzerdaten. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, sogar mit Root-Rechten. Um die Schwachstellen auszunutzen, muss der Angreifer über eine bestimmte Rolle oder erhöhte Rechte verfügen. Eine der Schwachstellen erfordert eine Benutzerinteraktion, um erfolgreich ausgenutzt zu werden, muss der Angreifer einen legitimen Benutzer überzeugen, ein Cluster-Backup zu initiieren.
Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die Cluster-Backup-Funktion und die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Eingabevalidierung bestimmter HTTP-Anfragen und Benutzerdaten. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, sogar mit Root-Rechten. Um die Schwachstellen auszunutzen, muss der Angreifer über eine bestimmte Rolle oder erhöhte Rechte verfügen. Eine der Schwachstellen erfordert eine Benutzerinteraktion, um erfolgreich ausgenutzt zu werden, muss der Angreifer einen legitimen Benutzer überzeugen, ein Cluster-Backup zu initiieren.
Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Validierung der vom Benutzer bereitgestellten Daten, wodurch SQL- und HTML-Injektionen möglich sind. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um Daten zu manipulieren, auf beliebige Dateien des zugrunde liegenden Betriebssystems zuzugreifen und serverseitige Anforderungsfälschung durchzuführen. Um diese Schwachstellen auszunutzen, muss der Angreifer über eine bestimmte Rolle oder erhöhte Rechte verfügen.
Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Validierung der vom Benutzer bereitgestellten Daten, wodurch SQL- und HTML-Injektionen möglich sind. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um Daten zu manipulieren, auf beliebige Dateien des zugrunde liegenden Betriebssystems zuzugreifen und serverseitige Anforderungsfälschung durchzuführen. Um diese Schwachstellen auszunutzen, muss der Angreifer über eine bestimmte Rolle oder erhöhte Rechte verfügen.
Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Validierung der vom Benutzer bereitgestellten Daten, wodurch SQL- und HTML-Injektionen möglich sind. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um Daten zu manipulieren, auf beliebige Dateien des zugrunde liegenden Betriebssystems zuzugreifen und serverseitige Anforderungsfälschung durchzuführen. Um diese Schwachstellen auszunutzen, muss der Angreifer über eine bestimmte Rolle oder erhöhte Rechte verfügen.
Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Validierung der vom Benutzer bereitgestellten Daten, wodurch SQL- und HTML-Injektionen möglich sind. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um Daten zu manipulieren, auf beliebige Dateien des zugrunde liegenden Betriebssystems zuzugreifen und serverseitige Anforderungsfälschung durchzuführen. Um diese Schwachstellen auszunutzen, muss der Angreifer über eine bestimmte Rolle oder erhöhte Rechte verfügen.
Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Validierung der vom Benutzer bereitgestellten Daten, wodurch SQL- und HTML-Injektionen möglich sind. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um Daten zu manipulieren, auf beliebige Dateien des zugrunde liegenden Betriebssystems zuzugreifen und serverseitige Anforderungsfälschung durchzuführen. Um diese Schwachstellen auszunutzen, muss der Angreifer über eine bestimmte Rolle oder erhöhte Rechte verfügen.
Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Dieser Fehler betrifft die webbasierte Verwaltungsoberfläche aufgrund einer unzureichenden Validierung von Rollenberechtigungen. Ein entfernter, authentisierter Angreifer mit einer benutzerdefinierten Nur-Lese-Rolle kann diese Schwachstelle ausnutzen, um erhöhte Berechtigungen zu erlangen, indem er einen Schreibvorgang auf dem betroffenen Teil der webbasierten Verwaltungsoberfläche durchführt.
References
| URL | Category | |||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Das Cisco Secure Firewall Management Center ist eine zentralisierte Plattform, die eine Verwaltung und \u00dcberwachung von Cisco Firewall-Ger\u00e4ten erm\u00f6glicht.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Cisco Secure Firewall Management Center ausnutzen, um einen Cross-Site Scripting Angriff durchzuf\u00fchren, vertrauliche Informationen preiszugeben, beliebigen Code auszuf\u00fchren, Daten zu manipulieren und erh\u00f6hte Rechte zu erlangen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- CISCO Appliance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-3267 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3267.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-3267 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3267"
},
{
"category": "external",
"summary": "Cisco Security Advisory vom 2024-10-23",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-infodisc-RL4mJFer"
},
{
"category": "external",
"summary": "Cisco Security Advisory vom 2024-10-23",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-2HBkA97G"
},
{
"category": "external",
"summary": "Cisco Security Advisory vom 2024-10-23",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-g8AOKnDP"
},
{
"category": "external",
"summary": "Cisco Security Advisory vom 2024-10-23",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-v3AWDqN7"
},
{
"category": "external",
"summary": "Cisco Security Advisory vom 2024-10-23",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-file-read-5q4mQRn"
},
{
"category": "external",
"summary": "Cisco Security Advisory vom 2024-10-23",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-html-inj-nfJeYHxz"
},
{
"category": "external",
"summary": "Cisco Security Advisory vom 2024-10-23",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-priv-esc-CMQ4S6m7"
},
{
"category": "external",
"summary": "Cisco Security Advisory vom 2024-10-23",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v"
},
{
"category": "external",
"summary": "Cisco Security Advisory vom 2024-10-23",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inj-LOYAFcfq"
},
{
"category": "external",
"summary": "Cisco Security Advisory vom 2024-10-23",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-dhJxQYZs"
}
],
"source_lang": "en-US",
"title": "Cisco Secure Firewall Management Center: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-10-23T22:00:00.000+00:00",
"generator": {
"date": "2024-10-24T11:11:14.292+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.8"
}
},
"id": "WID-SEC-W-2024-3267",
"initial_release_date": "2024-10-23T22:00:00.000+00:00",
"revision_history": [
{
"date": "2024-10-23T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cisco Secure Firewall Management Center",
"product": {
"name": "Cisco Secure Firewall Management Center",
"product_id": "T038565",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:secure_firewall_management_center:-"
}
}
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-20264",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20264"
},
{
"cve": "CVE-2024-20269",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20269"
},
{
"cve": "CVE-2024-20273",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20273"
},
{
"cve": "CVE-2024-20298",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20298"
},
{
"cve": "CVE-2024-20300",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20300"
},
{
"cve": "CVE-2024-20364",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20364"
},
{
"cve": "CVE-2024-20372",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20372"
},
{
"cve": "CVE-2024-20377",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20377"
},
{
"cve": "CVE-2024-20386",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20386"
},
{
"cve": "CVE-2024-20387",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20387"
},
{
"cve": "CVE-2024-20403",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20403"
},
{
"cve": "CVE-2024-20409",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20409"
},
{
"cve": "CVE-2024-20410",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20410"
},
{
"cve": "CVE-2024-20415",
"notes": [
{
"category": "description",
"text": "In Cisco Secure Firewall Management Center existieren mehrere Cross-Site Scripting Schwachstellen. HTML und Script-Eingaben werden in der webbasierten Verwaltungsschnittstelle nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft, bevor sie an den Benutzer zur\u00fcckgegeben werden. Ein entfernter, anonymer oder authentisierter Angreifer kann durch Ausnutzung dieser Schwachstellen beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20415"
},
{
"cve": "CVE-2024-20379",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsoberfl\u00e4che und die Kennwortverwaltung aufgrund eines Logikfehlers bei Kennwortaktualisierungen und einer unzureichenden Validierung der vom Benutzer bereitgestellten Eingaben. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um vertrauliche Informationen preiszugeben, insbesondere um konfigurierte Benutzernamen zu ermitteln und beliebige Dateien auf dem zugrunde liegenden Betriebssystem des betroffenen Ger\u00e4ts zu lesen."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20379"
},
{
"cve": "CVE-2024-20388",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsoberfl\u00e4che und die Kennwortverwaltung aufgrund eines Logikfehlers bei Kennwortaktualisierungen und einer unzureichenden Validierung der vom Benutzer bereitgestellten Eingaben. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um vertrauliche Informationen preiszugeben, insbesondere um konfigurierte Benutzernamen zu ermitteln und beliebige Dateien auf dem zugrunde liegenden Betriebssystem des betroffenen Ger\u00e4ts zu lesen."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20388"
},
{
"cve": "CVE-2024-20275",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die Cluster-Backup-Funktion und die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Eingabevalidierung bestimmter HTTP-Anfragen und Benutzerdaten. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, sogar mit Root-Rechten. Um die Schwachstellen auszunutzen, muss der Angreifer \u00fcber eine bestimmte Rolle oder erh\u00f6hte Rechte verf\u00fcgen. Eine der Schwachstellen erfordert eine Benutzerinteraktion, um erfolgreich ausgenutzt zu werden, muss der Angreifer einen legitimen Benutzer \u00fcberzeugen, ein Cluster-Backup zu initiieren."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20275"
},
{
"cve": "CVE-2024-20374",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die Cluster-Backup-Funktion und die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Eingabevalidierung bestimmter HTTP-Anfragen und Benutzerdaten. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, sogar mit Root-Rechten. Um die Schwachstellen auszunutzen, muss der Angreifer \u00fcber eine bestimmte Rolle oder erh\u00f6hte Rechte verf\u00fcgen. Eine der Schwachstellen erfordert eine Benutzerinteraktion, um erfolgreich ausgenutzt zu werden, muss der Angreifer einen legitimen Benutzer \u00fcberzeugen, ein Cluster-Backup zu initiieren."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20374"
},
{
"cve": "CVE-2024-20424",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die Cluster-Backup-Funktion und die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Eingabevalidierung bestimmter HTTP-Anfragen und Benutzerdaten. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, sogar mit Root-Rechten. Um die Schwachstellen auszunutzen, muss der Angreifer \u00fcber eine bestimmte Rolle oder erh\u00f6hte Rechte verf\u00fcgen. Eine der Schwachstellen erfordert eine Benutzerinteraktion, um erfolgreich ausgenutzt zu werden, muss der Angreifer einen legitimen Benutzer \u00fcberzeugen, ein Cluster-Backup zu initiieren."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20424"
},
{
"cve": "CVE-2024-20274",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Validierung der vom Benutzer bereitgestellten Daten, wodurch SQL- und HTML-Injektionen m\u00f6glich sind. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um Daten zu manipulieren, auf beliebige Dateien des zugrunde liegenden Betriebssystems zuzugreifen und serverseitige Anforderungsf\u00e4lschung durchzuf\u00fchren. Um diese Schwachstellen auszunutzen, muss der Angreifer \u00fcber eine bestimmte Rolle oder erh\u00f6hte Rechte verf\u00fcgen."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20274"
},
{
"cve": "CVE-2024-20340",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Validierung der vom Benutzer bereitgestellten Daten, wodurch SQL- und HTML-Injektionen m\u00f6glich sind. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um Daten zu manipulieren, auf beliebige Dateien des zugrunde liegenden Betriebssystems zuzugreifen und serverseitige Anforderungsf\u00e4lschung durchzuf\u00fchren. Um diese Schwachstellen auszunutzen, muss der Angreifer \u00fcber eine bestimmte Rolle oder erh\u00f6hte Rechte verf\u00fcgen."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20340"
},
{
"cve": "CVE-2024-20471",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Validierung der vom Benutzer bereitgestellten Daten, wodurch SQL- und HTML-Injektionen m\u00f6glich sind. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um Daten zu manipulieren, auf beliebige Dateien des zugrunde liegenden Betriebssystems zuzugreifen und serverseitige Anforderungsf\u00e4lschung durchzuf\u00fchren. Um diese Schwachstellen auszunutzen, muss der Angreifer \u00fcber eine bestimmte Rolle oder erh\u00f6hte Rechte verf\u00fcgen."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20471"
},
{
"cve": "CVE-2024-20472",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Validierung der vom Benutzer bereitgestellten Daten, wodurch SQL- und HTML-Injektionen m\u00f6glich sind. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um Daten zu manipulieren, auf beliebige Dateien des zugrunde liegenden Betriebssystems zuzugreifen und serverseitige Anforderungsf\u00e4lschung durchzuf\u00fchren. Um diese Schwachstellen auszunutzen, muss der Angreifer \u00fcber eine bestimmte Rolle oder erh\u00f6hte Rechte verf\u00fcgen."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20472"
},
{
"cve": "CVE-2024-20473",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Diese Fehler betreffen die webbasierte Verwaltungsschnittstelle aufgrund einer unzureichenden Validierung der vom Benutzer bereitgestellten Daten, wodurch SQL- und HTML-Injektionen m\u00f6glich sind. Ein entfernter, authentisierter Angreifer kann diese Schwachstellen ausnutzen, um Daten zu manipulieren, auf beliebige Dateien des zugrunde liegenden Betriebssystems zuzugreifen und serverseitige Anforderungsf\u00e4lschung durchzuf\u00fchren. Um diese Schwachstellen auszunutzen, muss der Angreifer \u00fcber eine bestimmte Rolle oder erh\u00f6hte Rechte verf\u00fcgen."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20473"
},
{
"cve": "CVE-2024-20482",
"notes": [
{
"category": "description",
"text": "Es bestehen mehrere Schwachstellen im Cisco Secure Firewall Management Center. Dieser Fehler betrifft die webbasierte Verwaltungsoberfl\u00e4che aufgrund einer unzureichenden Validierung von Rollenberechtigungen. Ein entfernter, authentisierter Angreifer mit einer benutzerdefinierten Nur-Lese-Rolle kann diese Schwachstelle ausnutzen, um erh\u00f6hte Berechtigungen zu erlangen, indem er einen Schreibvorgang auf dem betroffenen Teil der webbasierten Verwaltungsoberfl\u00e4che durchf\u00fchrt."
}
],
"product_status": {
"known_affected": [
"T038565"
]
},
"release_date": "2024-10-23T22:00:00.000+00:00",
"title": "CVE-2024-20482"
}
]
}
CISCO-SA-FMC-SQL-INJECT-2ENMTC8V
Vulnerability from csaf_cisco - Published: 2024-10-23 16:00 - Updated: 2026-03-04 16:11Summary
Cisco Secure Firewall Management Center Software SQL Injection Vulnerability
Notes
Summary: A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, an attacker must have a valid account on the device with the role of Security Approver, Intrusion Admin, Access Admin, or Network Admin.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to read the contents of databases on the affected device and also obtain limited read access to the underlying operating system.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is part of the October 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75300"].
Vulnerable Products: At the time of publication, this vulnerability affected Cisco FMC Software.
For information about which Cisco software releases are vulnerable, see the Fixed Software ["#fs"] section of this advisory.
Products Confirmed Not Vulnerable: Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by this vulnerability.
Cisco has confirmed that this vulnerability does not affect Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat Defense (FTD) Software.
Workarounds: There are no workarounds that address this vulnerability.
Fixed Software: Cisco considers any workarounds and mitigations (if applicable) to be temporary solutions until an upgrade to a fixed software release is available. To fully remediate this vulnerability and avoid future exposure as described in this advisory, Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.
Cisco ASA, FMC, and FTD Software
To help customers determine their exposure to vulnerabilities in Cisco ASA, FMC, and FTD Software, Cisco provides the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (“First Fixed”). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (“Combined First Fixed”).
To use the tool, go to the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"] page and follow the instructions. Alternatively, use the following form to search for vulnerabilities that affect a specific software release. To use the form, follow these steps:
Choose which advisories the tool will search—all advisories, only advisories with a Critical or High Security Impact Rating (SIR) ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"], or only this advisory.
Choose the appropriate software.
Choose the appropriate platform.
Enter a release number—for example, 9.16.2.11 for Cisco ASA Software or 6.6.7 for Cisco FTD Software.
Click Check.
Only this advisory All Critical and High advisories All advisories Cisco ASA Software Cisco FMC Software Cisco FTD Software Any Platform 3000 Series Industrial Security Appliances (ISA) ASA 5500-X Series Firewalls ASA Service Module Adaptive Security Virtual Appliance (ASAv) Firepower 1000 Series Firepower 2100 Series Firepower 4100 Series Firepower 9000 Series Firepower NGFW Virtual Secure Firewall 3100 Series Firepower Management Center Appliances
Additional Resources
For help determining the best Cisco ASA, FMC, or FTD Software release, see the following Recommended Releases documents. If a security advisory recommends a later release, Cisco recommends following the advisory guidance.
Cisco ASA Compatibility ["https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html"]
Cisco Secure Firewall ASA Upgrade Guide ["https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html"]
Cisco Secure Firewall Threat Defense Compatibility Guide ["https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/compatibility/threat-defense-compatibility.html"]
Vulnerability Policy: To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.
Exploitation and Public Announcements: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.
Source: This vulnerability was found during internal security testing.
Legal Disclaimer: THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.
A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.
6.5 (Medium)
Vendor Fix
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
References
| URL | Category | ||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
Acknowledgments
{
"document": {
"acknowledgments": [
{
"summary": "This vulnerability was found during internal security testing."
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"notes": [
{
"category": "summary",
"text": "A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, an attacker must have a valid account on the device with the role of Security Approver, Intrusion Admin, Access Admin, or Network Admin.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to read the contents of databases on the affected device and also obtain limited read access to the underlying operating system.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\n\r\n\r\nThis advisory is part of the October 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication [\"https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75300\"].",
"title": "Summary"
},
{
"category": "general",
"text": "At the time of publication, this vulnerability affected Cisco FMC Software.\r\n\r\nFor information about which Cisco software releases are vulnerable, see the Fixed Software [\"#fs\"] section of this advisory.",
"title": "Vulnerable Products"
},
{
"category": "general",
"text": "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by this vulnerability.\r\n\r\nCisco has confirmed that this vulnerability does not affect Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat Defense (FTD) Software.",
"title": "Products Confirmed Not Vulnerable"
},
{
"category": "general",
"text": "There are no workarounds that address this vulnerability.",
"title": "Workarounds"
},
{
"category": "general",
"text": "Cisco considers any workarounds and mitigations (if applicable) to be temporary solutions until an upgrade to a fixed software release is available. To fully remediate this vulnerability and avoid future exposure as described in this advisory, Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.\r\n Cisco ASA, FMC, and FTD Software\r\nTo help customers determine their exposure to vulnerabilities in Cisco ASA, FMC, and FTD Software, Cisco provides the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (\u201cFirst Fixed\u201d). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (\u201cCombined First Fixed\u201d).\r\n\r\nTo use the tool, go to the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"] page and follow the instructions. Alternatively, use the following form to search for vulnerabilities that affect a specific software release. To use the form, follow these steps:\r\n\r\nChoose which advisories the tool will search\u2014all advisories, only advisories with a Critical or High Security Impact Rating (SIR) [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr\"], or only this advisory.\r\nChoose the appropriate software.\r\nChoose the appropriate platform.\r\nEnter a release number\u2014for example, 9.16.2.11 for Cisco ASA Software or 6.6.7 for Cisco FTD Software.\r\nClick Check.\r\n Only this advisory All Critical and High advisories All advisories Cisco ASA Software Cisco FMC Software Cisco FTD Software Any Platform 3000 Series Industrial Security Appliances (ISA) ASA 5500-X Series Firewalls ASA Service Module Adaptive Security Virtual Appliance (ASAv) Firepower 1000 Series Firepower 2100 Series Firepower 4100 Series Firepower 9000 Series Firepower NGFW Virtual Secure Firewall 3100 Series Firepower Management Center Appliances\r\n\r\n\r\n\r\n Additional Resources\r\nFor help determining the best Cisco ASA, FMC, or FTD Software release, see the following Recommended Releases documents. If a security advisory recommends a later release, Cisco recommends following the advisory guidance.\r\n\r\nCisco ASA Compatibility [\"https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html\"]\r\nCisco Secure Firewall ASA Upgrade Guide [\"https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html\"]\r\nCisco Secure Firewall Threat Defense Compatibility Guide [\"https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/compatibility/threat-defense-compatibility.html\"]",
"title": "Fixed Software"
},
{
"category": "general",
"text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
"title": "Vulnerability Policy"
},
{
"category": "general",
"text": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
"title": "Exploitation and Public Announcements"
},
{
"category": "general",
"text": "This vulnerability was found during internal security testing.",
"title": "Source"
},
{
"category": "legal_disclaimer",
"text": "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.",
"title": "Legal Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "psirt@cisco.com",
"issuing_authority": "Cisco PSIRT",
"name": "Cisco",
"namespace": "https://wwww.cisco.com"
},
"references": [
{
"category": "self",
"summary": "Cisco Secure Firewall Management Center Software SQL Injection Vulnerability",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v"
},
{
"category": "external",
"summary": "Cisco Security Vulnerability Policy",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
},
{
"category": "external",
"summary": "Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication",
"url": "https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75300"
},
{
"category": "external",
"summary": "Cisco Software Checker",
"url": "https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"
},
{
"category": "external",
"summary": "Security Impact Rating (SIR)",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"
},
{
"category": "external",
"summary": "Cisco ASA Compatibility",
"url": "https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html"
},
{
"category": "external",
"summary": "Cisco Secure Firewall ASA Upgrade Guide",
"url": "https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html"
},
{
"category": "external",
"summary": "Cisco Secure Firewall Threat Defense Compatibility Guide",
"url": "https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/compatibility/threat-defense-compatibility.html"
},
{
"category": "external",
"summary": "Security Vulnerability Policy",
"url": "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"
}
],
"title": "Cisco Secure Firewall Management Center Software SQL Injection Vulnerability",
"tracking": {
"current_release_date": "2026-03-04T16:11:01+00:00",
"generator": {
"date": "2026-03-04T16:12:03+00:00",
"engine": {
"name": "TVCE"
}
},
"id": "cisco-sa-fmc-sql-inject-2EnmTC8v",
"initial_release_date": "2024-10-23T16:00:00+00:00",
"revision_history": [
{
"date": "2024-10-23T15:57:54+00:00",
"number": "1.0.0",
"summary": "Initial public release."
},
{
"date": "2026-03-04T16:11:01+00:00",
"number": "2.0.0",
"summary": "Added a new Cisco bug ID and updated releases in Cisco Software Checker."
}
],
"status": "final",
"version": "2.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "service_pack",
"name": "7.0.0",
"product": {
"name": "7.0.0",
"product_id": "CSAFPID-284312"
}
},
{
"category": "service_pack",
"name": "7.0.0.1",
"product": {
"name": "7.0.0.1",
"product_id": "CSAFPID-284313"
}
},
{
"category": "service_pack",
"name": "7.0.1",
"product": {
"name": "7.0.1",
"product_id": "CSAFPID-284793"
}
},
{
"category": "service_pack",
"name": "7.0.1.1",
"product": {
"name": "7.0.1.1",
"product_id": "CSAFPID-286577"
}
},
{
"category": "service_pack",
"name": "7.0.2",
"product": {
"name": "7.0.2",
"product_id": "CSAFPID-286910"
}
},
{
"category": "service_pack",
"name": "7.0.2.1",
"product": {
"name": "7.0.2.1",
"product_id": "CSAFPID-287124"
}
},
{
"category": "service_pack",
"name": "7.0.3",
"product": {
"name": "7.0.3",
"product_id": "CSAFPID-287182"
}
},
{
"category": "service_pack",
"name": "7.0.4",
"product": {
"name": "7.0.4",
"product_id": "CSAFPID-290583"
}
},
{
"category": "service_pack",
"name": "7.0.5",
"product": {
"name": "7.0.5",
"product_id": "CSAFPID-290662"
}
},
{
"category": "service_pack",
"name": "7.0.6",
"product": {
"name": "7.0.6",
"product_id": "CSAFPID-300118"
}
},
{
"category": "service_pack",
"name": "7.0.6.1",
"product": {
"name": "7.0.6.1",
"product_id": "CSAFPID-300944"
}
},
{
"category": "service_pack",
"name": "7.0.6.2",
"product": {
"name": "7.0.6.2",
"product_id": "CSAFPID-301607"
}
}
],
"category": "product_version",
"name": "7.0"
},
{
"branches": [
{
"category": "service_pack",
"name": "7.1.0",
"product": {
"name": "7.1.0",
"product_id": "CSAFPID-285972"
}
},
{
"category": "service_pack",
"name": "7.1.0.1",
"product": {
"name": "7.1.0.1",
"product_id": "CSAFPID-286576"
}
},
{
"category": "service_pack",
"name": "7.1.0.2",
"product": {
"name": "7.1.0.2",
"product_id": "CSAFPID-290475"
}
},
{
"category": "service_pack",
"name": "7.1.0.3",
"product": {
"name": "7.1.0.3",
"product_id": "CSAFPID-295139"
}
}
],
"category": "product_version",
"name": "7.1"
},
{
"branches": [
{
"category": "service_pack",
"name": "7.2.0",
"product": {
"name": "7.2.0",
"product_id": "CSAFPID-287074"
}
},
{
"category": "service_pack",
"name": "7.2.1",
"product": {
"name": "7.2.1",
"product_id": "CSAFPID-290564"
}
},
{
"category": "service_pack",
"name": "7.2.2",
"product": {
"name": "7.2.2",
"product_id": "CSAFPID-292412"
}
},
{
"category": "service_pack",
"name": "7.2.0.1",
"product": {
"name": "7.2.0.1",
"product_id": "CSAFPID-292659"
}
},
{
"category": "service_pack",
"name": "7.2.3",
"product": {
"name": "7.2.3",
"product_id": "CSAFPID-294798"
}
},
{
"category": "service_pack",
"name": "7.2.3.1",
"product": {
"name": "7.2.3.1",
"product_id": "CSAFPID-295354"
}
},
{
"category": "service_pack",
"name": "7.2.4",
"product": {
"name": "7.2.4",
"product_id": "CSAFPID-295499"
}
},
{
"category": "service_pack",
"name": "7.2.4.1",
"product": {
"name": "7.2.4.1",
"product_id": "CSAFPID-300182"
}
},
{
"category": "service_pack",
"name": "7.2.5",
"product": {
"name": "7.2.5",
"product_id": "CSAFPID-300183"
}
},
{
"category": "service_pack",
"name": "7.2.5.1",
"product": {
"name": "7.2.5.1",
"product_id": "CSAFPID-300946"
}
},
{
"category": "service_pack",
"name": "7.2.6",
"product": {
"name": "7.2.6",
"product_id": "CSAFPID-301470"
}
},
{
"category": "service_pack",
"name": "7.2.7",
"product": {
"name": "7.2.7",
"product_id": "CSAFPID-301637"
}
},
{
"category": "service_pack",
"name": "7.2.5.2",
"product": {
"name": "7.2.5.2",
"product_id": "CSAFPID-301704"
}
},
{
"category": "service_pack",
"name": "7.2.8",
"product": {
"name": "7.2.8",
"product_id": "CSAFPID-302630"
}
},
{
"category": "service_pack",
"name": "7.2.8.1",
"product": {
"name": "7.2.8.1",
"product_id": "CSAFPID-302816"
}
}
],
"category": "product_version",
"name": "7.2"
},
{
"branches": [
{
"category": "service_pack",
"name": "7.3.0",
"product": {
"name": "7.3.0",
"product_id": "CSAFPID-292361"
}
},
{
"category": "service_pack",
"name": "7.3.1",
"product": {
"name": "7.3.1",
"product_id": "CSAFPID-294961"
}
},
{
"category": "service_pack",
"name": "7.3.1.1",
"product": {
"name": "7.3.1.1",
"product_id": "CSAFPID-300511"
}
},
{
"category": "service_pack",
"name": "7.3.1.2",
"product": {
"name": "7.3.1.2",
"product_id": "CSAFPID-301706"
}
}
],
"category": "product_version",
"name": "7.3"
},
{
"branches": [
{
"category": "service_pack",
"name": "7.4.0",
"product": {
"name": "7.4.0",
"product_id": "CSAFPID-300735"
}
},
{
"category": "service_pack",
"name": "7.4.1",
"product": {
"name": "7.4.1",
"product_id": "CSAFPID-301110"
}
},
{
"category": "service_pack",
"name": "7.4.1.1",
"product": {
"name": "7.4.1.1",
"product_id": "CSAFPID-301608"
}
},
{
"category": "service_pack",
"name": "7.4.2",
"product": {
"name": "7.4.2",
"product_id": "CSAFPID-302687"
}
},
{
"category": "service_pack",
"name": "7.4.2.1",
"product": {
"name": "7.4.2.1",
"product_id": "CSAFPID-302967"
}
},
{
"category": "service_pack",
"name": "7.4.2.2",
"product": {
"name": "7.4.2.2",
"product_id": "CSAFPID-303336"
}
},
{
"category": "service_pack",
"name": "7.4.2.3",
"product": {
"name": "7.4.2.3",
"product_id": "CSAFPID-305307"
}
},
{
"category": "service_pack",
"name": "7.4.2.4",
"product": {
"name": "7.4.2.4",
"product_id": "CSAFPID-306652"
}
},
{
"category": "service_pack",
"name": "7.4.3",
"product": {
"name": "7.4.3",
"product_id": "CSAFPID-306666"
}
}
],
"category": "product_version",
"name": "7.4"
},
{
"branches": [
{
"category": "service_pack",
"name": "7.6.0",
"product": {
"name": "7.6.0",
"product_id": "CSAFPID-302872"
}
},
{
"category": "service_pack",
"name": "7.6.1",
"product": {
"name": "7.6.1",
"product_id": "CSAFPID-305281"
}
},
{
"category": "service_pack",
"name": "7.6.2",
"product": {
"name": "7.6.2",
"product_id": "CSAFPID-306550"
}
},
{
"category": "service_pack",
"name": "7.6.2.1",
"product": {
"name": "7.6.2.1",
"product_id": "CSAFPID-306644"
}
},
{
"category": "service_pack",
"name": "7.6.3",
"product": {
"name": "7.6.3",
"product_id": "CSAFPID-306832"
}
}
],
"category": "product_version",
"name": "7.6"
},
{
"branches": [
{
"category": "service_pack",
"name": "7.7.0",
"product": {
"name": "7.7.0",
"product_id": "CSAFPID-303351"
}
},
{
"category": "service_pack",
"name": "7.7.10",
"product": {
"name": "7.7.10",
"product_id": "CSAFPID-306553"
}
},
{
"category": "service_pack",
"name": "7.7.10.1",
"product": {
"name": "7.7.10.1",
"product_id": "CSAFPID-306645"
}
}
],
"category": "product_version",
"name": "7.7"
}
],
"category": "product_family",
"name": "Cisco Secure Firewall Management Center (FMC)"
},
{
"category": "product_name",
"name": "Cisco Secure Firewall Management Center (FMC) Appliances",
"product": {
"name": "Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-277516"
}
}
],
"category": "vendor",
"name": "Cisco"
}
],
"relationships": [
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-284312:277516"
},
"product_reference": "CSAFPID-284312",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-284313:277516"
},
"product_reference": "CSAFPID-284313",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-284793:277516"
},
"product_reference": "CSAFPID-284793",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.1.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-286577:277516"
},
"product_reference": "CSAFPID-286577",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-286910:277516"
},
"product_reference": "CSAFPID-286910",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-287124:277516"
},
"product_reference": "CSAFPID-287124",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-287182:277516"
},
"product_reference": "CSAFPID-287182",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-290583:277516"
},
"product_reference": "CSAFPID-290583",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-290662:277516"
},
"product_reference": "CSAFPID-290662",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300118:277516"
},
"product_reference": "CSAFPID-300118",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.6.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300944:277516"
},
"product_reference": "CSAFPID-300944",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.0.6.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301607:277516"
},
"product_reference": "CSAFPID-301607",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.1.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-285972:277516"
},
"product_reference": "CSAFPID-285972",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.1.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-286576:277516"
},
"product_reference": "CSAFPID-286576",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.1.0.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-290475:277516"
},
"product_reference": "CSAFPID-290475",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.1.0.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-295139:277516"
},
"product_reference": "CSAFPID-295139",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-287074:277516"
},
"product_reference": "CSAFPID-287074",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-290564:277516"
},
"product_reference": "CSAFPID-290564",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-292412:277516"
},
"product_reference": "CSAFPID-292412",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.0.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-292659:277516"
},
"product_reference": "CSAFPID-292659",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-294798:277516"
},
"product_reference": "CSAFPID-294798",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.3.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-295354:277516"
},
"product_reference": "CSAFPID-295354",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-295499:277516"
},
"product_reference": "CSAFPID-295499",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.4.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300182:277516"
},
"product_reference": "CSAFPID-300182",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.5 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300183:277516"
},
"product_reference": "CSAFPID-300183",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.5.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300946:277516"
},
"product_reference": "CSAFPID-300946",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.6 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301470:277516"
},
"product_reference": "CSAFPID-301470",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.7 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301637:277516"
},
"product_reference": "CSAFPID-301637",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.5.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301704:277516"
},
"product_reference": "CSAFPID-301704",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.8 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-302630:277516"
},
"product_reference": "CSAFPID-302630",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.2.8.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-302816:277516"
},
"product_reference": "CSAFPID-302816",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.3.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-292361:277516"
},
"product_reference": "CSAFPID-292361",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.3.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-294961:277516"
},
"product_reference": "CSAFPID-294961",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.3.1.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300511:277516"
},
"product_reference": "CSAFPID-300511",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.3.1.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301706:277516"
},
"product_reference": "CSAFPID-301706",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-300735:277516"
},
"product_reference": "CSAFPID-300735",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301110:277516"
},
"product_reference": "CSAFPID-301110",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.1.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-301608:277516"
},
"product_reference": "CSAFPID-301608",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-302687:277516"
},
"product_reference": "CSAFPID-302687",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-302967:277516"
},
"product_reference": "CSAFPID-302967",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.2.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-303336:277516"
},
"product_reference": "CSAFPID-303336",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.2.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-305307:277516"
},
"product_reference": "CSAFPID-305307",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.2.4 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306652:277516"
},
"product_reference": "CSAFPID-306652",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.4.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306666:277516"
},
"product_reference": "CSAFPID-306666",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.6.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-302872:277516"
},
"product_reference": "CSAFPID-302872",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.6.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-305281:277516"
},
"product_reference": "CSAFPID-305281",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.6.2 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306550:277516"
},
"product_reference": "CSAFPID-306550",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.6.2.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306644:277516"
},
"product_reference": "CSAFPID-306644",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.6.3 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306832:277516"
},
"product_reference": "CSAFPID-306832",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.7.0 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-303351:277516"
},
"product_reference": "CSAFPID-303351",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.7.10 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306553:277516"
},
"product_reference": "CSAFPID-306553",
"relates_to_product_reference": "CSAFPID-277516"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Cisco Secure Firewall Management Center (FMC) 7.7.10.1 when installed on Cisco Secure Firewall Management Center (FMC) Appliances",
"product_id": "CSAFPID-306645:277516"
},
"product_reference": "CSAFPID-306645",
"relates_to_product_reference": "CSAFPID-277516"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-20340",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwi23613"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCwk27741"
},
{
"system_name": "Cisco Bug ID",
"text": "CSCwo50716"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-284312:277516",
"CSAFPID-284313:277516",
"CSAFPID-284793:277516",
"CSAFPID-285972:277516",
"CSAFPID-286576:277516",
"CSAFPID-286577:277516",
"CSAFPID-286910:277516",
"CSAFPID-287074:277516",
"CSAFPID-287124:277516",
"CSAFPID-287182:277516",
"CSAFPID-290475:277516",
"CSAFPID-290564:277516",
"CSAFPID-290583:277516",
"CSAFPID-290662:277516",
"CSAFPID-292361:277516",
"CSAFPID-292412:277516",
"CSAFPID-292659:277516",
"CSAFPID-294798:277516",
"CSAFPID-294961:277516",
"CSAFPID-295139:277516",
"CSAFPID-295354:277516",
"CSAFPID-295499:277516",
"CSAFPID-300118:277516",
"CSAFPID-300182:277516",
"CSAFPID-300183:277516",
"CSAFPID-300511:277516",
"CSAFPID-300735:277516",
"CSAFPID-300944:277516",
"CSAFPID-300946:277516",
"CSAFPID-301110:277516",
"CSAFPID-301470:277516",
"CSAFPID-301607:277516",
"CSAFPID-301608:277516",
"CSAFPID-301637:277516",
"CSAFPID-301704:277516",
"CSAFPID-301706:277516",
"CSAFPID-302630:277516",
"CSAFPID-302687:277516",
"CSAFPID-302816:277516",
"CSAFPID-302872:277516",
"CSAFPID-302967:277516",
"CSAFPID-303336:277516",
"CSAFPID-303351:277516",
"CSAFPID-305281:277516",
"CSAFPID-305307:277516",
"CSAFPID-306550:277516",
"CSAFPID-306553:277516",
"CSAFPID-306644:277516",
"CSAFPID-306645:277516",
"CSAFPID-306652:277516",
"CSAFPID-306666:277516",
"CSAFPID-306832:277516"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-284312:277516",
"CSAFPID-284313:277516",
"CSAFPID-284793:277516",
"CSAFPID-285972:277516",
"CSAFPID-286576:277516",
"CSAFPID-286577:277516",
"CSAFPID-286910:277516",
"CSAFPID-287074:277516",
"CSAFPID-287124:277516",
"CSAFPID-287182:277516",
"CSAFPID-290475:277516",
"CSAFPID-290564:277516",
"CSAFPID-290583:277516",
"CSAFPID-290662:277516",
"CSAFPID-292361:277516",
"CSAFPID-292412:277516",
"CSAFPID-292659:277516",
"CSAFPID-294798:277516",
"CSAFPID-294961:277516",
"CSAFPID-295139:277516",
"CSAFPID-295354:277516",
"CSAFPID-295499:277516",
"CSAFPID-300118:277516",
"CSAFPID-300182:277516",
"CSAFPID-300183:277516",
"CSAFPID-300511:277516",
"CSAFPID-300735:277516",
"CSAFPID-300944:277516",
"CSAFPID-300946:277516",
"CSAFPID-301110:277516",
"CSAFPID-301470:277516",
"CSAFPID-301607:277516",
"CSAFPID-301608:277516",
"CSAFPID-301637:277516",
"CSAFPID-301704:277516",
"CSAFPID-301706:277516",
"CSAFPID-302630:277516",
"CSAFPID-302687:277516",
"CSAFPID-302816:277516",
"CSAFPID-302872:277516",
"CSAFPID-302967:277516",
"CSAFPID-303336:277516",
"CSAFPID-303351:277516",
"CSAFPID-305281:277516",
"CSAFPID-305307:277516",
"CSAFPID-306550:277516",
"CSAFPID-306553:277516",
"CSAFPID-306644:277516",
"CSAFPID-306645:277516",
"CSAFPID-306652:277516",
"CSAFPID-306666:277516",
"CSAFPID-306832:277516"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-284312:277516",
"CSAFPID-284313:277516",
"CSAFPID-284793:277516",
"CSAFPID-285972:277516",
"CSAFPID-286576:277516",
"CSAFPID-286577:277516",
"CSAFPID-286910:277516",
"CSAFPID-287074:277516",
"CSAFPID-287124:277516",
"CSAFPID-287182:277516",
"CSAFPID-290475:277516",
"CSAFPID-290564:277516",
"CSAFPID-290583:277516",
"CSAFPID-290662:277516",
"CSAFPID-292361:277516",
"CSAFPID-292412:277516",
"CSAFPID-292659:277516",
"CSAFPID-294798:277516",
"CSAFPID-294961:277516",
"CSAFPID-295139:277516",
"CSAFPID-295354:277516",
"CSAFPID-295499:277516",
"CSAFPID-300118:277516",
"CSAFPID-300182:277516",
"CSAFPID-300183:277516",
"CSAFPID-300511:277516",
"CSAFPID-300735:277516",
"CSAFPID-300944:277516",
"CSAFPID-300946:277516",
"CSAFPID-301110:277516",
"CSAFPID-301470:277516",
"CSAFPID-301607:277516",
"CSAFPID-301608:277516",
"CSAFPID-301637:277516",
"CSAFPID-301704:277516",
"CSAFPID-301706:277516",
"CSAFPID-302630:277516",
"CSAFPID-302687:277516",
"CSAFPID-302816:277516",
"CSAFPID-302872:277516",
"CSAFPID-302967:277516",
"CSAFPID-303336:277516",
"CSAFPID-303351:277516",
"CSAFPID-305281:277516",
"CSAFPID-305307:277516",
"CSAFPID-306550:277516",
"CSAFPID-306553:277516",
"CSAFPID-306644:277516",
"CSAFPID-306645:277516",
"CSAFPID-306652:277516",
"CSAFPID-306666:277516",
"CSAFPID-306832:277516"
]
}
],
"title": "Cisco Secure Firewall Management Center SQL Injection Vulnerability"
}
]
}
BDU:2024-11140
Vulnerability from fstec - Published: 23.10.2024
VLAI Severity ?
Title
Уязвимость веб-интерфейса управления программного обеспечения администрирования сети Cisco Secure Firewall Management Center (ранее Cisco Firepower Management Center), позволяющая нарушителю выполнить произвольный SQL-код
Description
Уязвимость веб-интерфейса управления программного обеспечения администрирования сети Cisco Secure Firewall Management Center (ранее Cisco Firepower Management Center) связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный SQL-код
Severity ?
Vendor
Cisco Systems Inc.
Software Name
Cisco Firepower Management Center
Software Version
7.0.0 (Cisco Firepower Management Center), 7.0.0.1 (Cisco Firepower Management Center), 7.0.1 (Cisco Firepower Management Center), 7.0.1.1 (Cisco Firepower Management Center), 7.0.2 (Cisco Firepower Management Center), 7.0.2.1 (Cisco Firepower Management Center), 7.0.3 (Cisco Firepower Management Center), 7.0.4 (Cisco Firepower Management Center), 7.2.0 (Cisco Firepower Management Center), 7.2.1 (Cisco Firepower Management Center), 7.0.5 (Cisco Firepower Management Center), 7.1.0 (Cisco Firepower Management Center), 7.1.0.1 (Cisco Firepower Management Center), 7.1.0.2 (Cisco Firepower Management Center), 7.1.0.3 (Cisco Firepower Management Center), 7.2.2 (Cisco Firepower Management Center), 7.2.0.1 (Cisco Firepower Management Center), 7.2.3 (Cisco Firepower Management Center), 7.2.3.1 (Cisco Firepower Management Center), 7.3.0 (Cisco Firepower Management Center), 7.3.1 (Cisco Firepower Management Center), 7.3.1.1 (Cisco Firepower Management Center), 7.0.6 (Cisco Firepower Management Center), 7.2.4.1 (Cisco Firepower Management Center), 7.3.1.2 (Cisco Firepower Management Center), 7.2.4 (Cisco Firepower Management Center), 7.2.5 (Cisco Firepower Management Center), 7.4.0 (Cisco Firepower Management Center), 7.4.1 (Cisco Firepower Management Center), 7.4.1.1 (Cisco Firepower Management Center), 7.0.6.1 (Cisco Firepower Management Center), 7.0.6.2 (Cisco Firepower Management Center), 7.2.5.1 (Cisco Firepower Management Center), 7.2.6 (Cisco Firepower Management Center), 7.2.7 (Cisco Firepower Management Center), 7.2.5.2 (Cisco Firepower Management Center), 7.2.8 (Cisco Firepower Management Center), 7.2.8.1 (Cisco Firepower Management Center), 7.4.2 (Cisco Firepower Management Center)
Possible Mitigations
Использование рекомендаций производителя:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v
Reference
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v
CWE
CWE-89
{
"CVSS 2.0": "AV:N/AC:L/Au:S/C:C/I:N/A:N",
"CVSS 3.0": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems Inc.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "7.0.0 (Cisco Firepower Management Center), 7.0.0.1 (Cisco Firepower Management Center), 7.0.1 (Cisco Firepower Management Center), 7.0.1.1 (Cisco Firepower Management Center), 7.0.2 (Cisco Firepower Management Center), 7.0.2.1 (Cisco Firepower Management Center), 7.0.3 (Cisco Firepower Management Center), 7.0.4 (Cisco Firepower Management Center), 7.2.0 (Cisco Firepower Management Center), 7.2.1 (Cisco Firepower Management Center), 7.0.5 (Cisco Firepower Management Center), 7.1.0 (Cisco Firepower Management Center), 7.1.0.1 (Cisco Firepower Management Center), 7.1.0.2 (Cisco Firepower Management Center), 7.1.0.3 (Cisco Firepower Management Center), 7.2.2 (Cisco Firepower Management Center), 7.2.0.1 (Cisco Firepower Management Center), 7.2.3 (Cisco Firepower Management Center), 7.2.3.1 (Cisco Firepower Management Center), 7.3.0 (Cisco Firepower Management Center), 7.3.1 (Cisco Firepower Management Center), 7.3.1.1 (Cisco Firepower Management Center), 7.0.6 (Cisco Firepower Management Center), 7.2.4.1 (Cisco Firepower Management Center), 7.3.1.2 (Cisco Firepower Management Center), 7.2.4 (Cisco Firepower Management Center), 7.2.5 (Cisco Firepower Management Center), 7.4.0 (Cisco Firepower Management Center), 7.4.1 (Cisco Firepower Management Center), 7.4.1.1 (Cisco Firepower Management Center), 7.0.6.1 (Cisco Firepower Management Center), 7.0.6.2 (Cisco Firepower Management Center), 7.2.5.1 (Cisco Firepower Management Center), 7.2.6 (Cisco Firepower Management Center), 7.2.7 (Cisco Firepower Management Center), 7.2.5.2 (Cisco Firepower Management Center), 7.2.8 (Cisco Firepower Management Center), 7.2.8.1 (Cisco Firepower Management Center), 7.4.2 (Cisco Firepower Management Center)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "23.10.2024",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "16.12.2024",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "16.12.2024",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-11140",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-20340",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco Firepower Management Center",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0438 Cisco Secure Firewall Management Center (\u0440\u0430\u043d\u0435\u0435 Cisco Firepower Management Center), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 SQL-\u043a\u043e\u0434",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435 \u043c\u0435\u0440 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0437\u0430\u043f\u0440\u043e\u0441\u0430 SQL (\u0430\u0442\u0430\u043a\u0438 \u0442\u0438\u043f\u0430 \\\"\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 SQL\\\") (CWE-89)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0438 Cisco Secure Firewall Management Center (\u0440\u0430\u043d\u0435\u0435 Cisco Firepower Management Center) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0437\u0430\u043f\u0440\u043e\u0441\u0430 SQL. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 SQL-\u043a\u043e\u0434",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u043d\u044a\u0435\u043a\u0446\u0438\u044f",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-89",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,5)"
}
GSD-2024-20340
Vulnerability from gsd - Updated: 2023-12-13 01:21Details
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2024-20340",
"id": "GSD-2024-20340"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2024-20340"
],
"id": "GSD-2024-20340",
"modified": "2023-12-13T01:21:42.860778Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2024-20340",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}
}
}
FKIE_CVE-2024-20340
Vulnerability from fkie_nvd - Published: 2024-10-23 17:15 - Updated: 2026-03-04 18:16
Severity ?
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Summary
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, an attacker must have a valid account on the device with the role of Security Approver, Intrusion Admin, Access Admin, or Network Admin.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to read the contents of databases on the affected device and also obtain limited read access to the underlying operating system.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| cisco | secure_firewall_management_center | 7.0.0 | |
| cisco | secure_firewall_management_center | 7.0.0.1 | |
| cisco | secure_firewall_management_center | 7.0.1 | |
| cisco | secure_firewall_management_center | 7.0.1.1 | |
| cisco | secure_firewall_management_center | 7.0.2 | |
| cisco | secure_firewall_management_center | 7.0.2.1 | |
| cisco | secure_firewall_management_center | 7.0.3 | |
| cisco | secure_firewall_management_center | 7.0.4 | |
| cisco | secure_firewall_management_center | 7.0.5 | |
| cisco | secure_firewall_management_center | 7.0.6 | |
| cisco | secure_firewall_management_center | 7.0.6.1 | |
| cisco | secure_firewall_management_center | 7.0.6.2 | |
| cisco | secure_firewall_management_center | 7.1.0 | |
| cisco | secure_firewall_management_center | 7.1.0.1 | |
| cisco | secure_firewall_management_center | 7.1.0.2 | |
| cisco | secure_firewall_management_center | 7.1.0.3 | |
| cisco | secure_firewall_management_center | 7.2.0 | |
| cisco | secure_firewall_management_center | 7.2.0.1 | |
| cisco | secure_firewall_management_center | 7.2.1 | |
| cisco | secure_firewall_management_center | 7.2.2 | |
| cisco | secure_firewall_management_center | 7.2.3 | |
| cisco | secure_firewall_management_center | 7.2.3.1 | |
| cisco | secure_firewall_management_center | 7.2.4 | |
| cisco | secure_firewall_management_center | 7.2.4.1 | |
| cisco | secure_firewall_management_center | 7.2.5 | |
| cisco | secure_firewall_management_center | 7.2.5.1 | |
| cisco | secure_firewall_management_center | 7.2.5.2 | |
| cisco | secure_firewall_management_center | 7.2.6 | |
| cisco | secure_firewall_management_center | 7.2.7 | |
| cisco | secure_firewall_management_center | 7.2.8 | |
| cisco | secure_firewall_management_center | 7.2.8.1 | |
| cisco | secure_firewall_management_center | 7.3.0 | |
| cisco | secure_firewall_management_center | 7.3.1 | |
| cisco | secure_firewall_management_center | 7.3.1.1 | |
| cisco | secure_firewall_management_center | 7.3.1.2 | |
| cisco | secure_firewall_management_center | 7.4.0 | |
| cisco | secure_firewall_management_center | 7.4.1 | |
| cisco | secure_firewall_management_center | 7.4.1.1 | |
| cisco | secure_firewall_management_center | 7.4.2 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DFA94312-376E-4785-888F-3C07612E1DF7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "29E73FBF-2579-4660-AFFA-7F9607004226",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "87FAAFFB-0589-441B-8289-8B8A6E18F705",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "73B92119-793D-4A43-A056-24DB6826E759",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "093A0BC2-037C-463F-AFC5-EF11C2954EAD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "C4F434FC-CAA4-4DBB-8094-C4ECC28B31E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "68C70BB3-33B3-4E7E-99D5-FF76D4ED96AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "B881B8DF-A96D-4B64-B98A-71F0D3388641",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "F6A97625-D39C-42D5-89E4-415A868A0972",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6:*:*:*:*:*:*:*",
"matchCriteriaId": "5E4D83B4-9697-4071-AC9F-7ADC86A6B529",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8F81F708-ACED-4E42-8CA9-116B5C4F5141",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3C86116B-8475-40A0-A507-D4A7947F5F2C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A58A2DA5-3EE7-408D-AAFA-82330F0325B2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7FA98EEC-2059-4CA9-92F1-72C1E0BB7EC6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "F4C51EE7-866B-410C-B75E-EF260D5062B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "5F1FFD07-B874-4D3C-8E2C-9A204F1E994E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FB5ACB9E-86AF-4EC1-9F36-A202429CD0F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "AD1E4527-AAE2-4DA9-AFDA-6375839F7843",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2F0AF047-EAE9-4C77-BCEF-5CB26F84C742",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "2ED03874-4071-4382-8A46-8B3A59E601FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "BF84E043-DF3C-4A95-8FDA-B0FDCD795377",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B9498087-9642-4A86-B3EE-1513C55A86E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "36C229AB-2851-48D4-815A-63AAB4462A24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6DA4BCFC-8237-4F5C-9863-523EE7D8619B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "07693A92-7D84-45A1-ACD6-D83AE41D504B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2C78050A-A5FB-427B-BF0D-0353B240A4FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "85E76AE7-12AC-4419-AE66-43730B173B4E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "4D803EC9-26EE-4799-A435-C782C92739CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "6EEF87CD-2335-4886-A65C-4E33775AEC52",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8:*:*:*:*:*:*:*",
"matchCriteriaId": "953EB81A-1B53-4A57-9F59-D4A7D37E657E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1CB534BC-3E4D-4484-AFD0-69524B1F07F9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "5D401072-6709-4921-8918-720F28D61E24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "C0EA3467-4205-4C41-AF24-689330F7396B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9BE94E38-5F29-4AE1-8129-7F7582C2CC75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "FEF603AD-D69B-4DD8-A7F4-6BEFD355EF29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D6BD1665-7824-4D98-A930-432CBDA4EAD5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F8056E69-22FA-4935-A576-916805D90C62",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6A80BBBE-DB5E-460A-8621-6E28D2BD6E44",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.2:*:*:*:*:*:*:*",
"matchCriteriaId": "2B33F953-FEF3-4C46-A12A-2A42D8339D6E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, an attacker must have a valid account on the device with the role of Security Approver, Intrusion Admin, Access Admin, or Network Admin.\r\n\r This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to read the contents of databases on the affected device and also obtain limited read access to the underlying operating system."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web del software Cisco Secure Firewall Management Center (FMC), anteriormente Firepower Management Center Software, podr\u00eda permitir que un atacante remoto autenticado realice un ataque de inyecci\u00f3n SQL contra un dispositivo afectado. Para aprovechar esta vulnerabilidad, un atacante debe tener una cuenta v\u00e1lida en el dispositivo con el rol de aprobador de seguridad, administrador de intrusiones, administrador de acceso o administrador de red. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de la entrada proporcionada por el usuario. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando una solicitud HTTP manipulada a la interfaz de administraci\u00f3n basada en web de un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante leer el contenido de las bases de datos en el dispositivo afectado y tambi\u00e9n obtener acceso de lectura limitado al sistema operativo subyacente."
}
],
"id": "CVE-2024-20340",
"lastModified": "2026-03-04T18:16:10.040",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"source": "psirt@cisco.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2024-10-23T17:15:18.300",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-89"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-89"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-JR5Q-32RG-GCQQ
Vulnerability from github – Published: 2024-10-23 18:33 – Updated: 2024-10-23 18:33
VLAI?
Details
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, an attacker must have a valid account on the device with the role of Security Approver, Intrusion Admin, Access Admin, or Network Admin.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to read the contents of databases on the affected device and also obtain limited read access to the underlying operating system.
Severity ?
6.5 (Medium)
{
"affected": [],
"aliases": [
"CVE-2024-20340"
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-23T17:15:18Z",
"severity": "MODERATE"
},
"details": "A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, an attacker must have a valid account on the device with the role of Security Approver, Intrusion Admin, Access Admin, or Network Admin.\n\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to read the contents of databases on the affected device and also obtain limited read access to the underlying operating system.",
"id": "GHSA-jr5q-32rg-gcqq",
"modified": "2024-10-23T18:33:08Z",
"published": "2024-10-23T18:33:08Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20340"
},
{
"type": "WEB",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v"
},
{
"type": "WEB",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-M446vbEO"
},
{
"type": "WEB",
"url": "https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75300"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
Loading…
Show additional events:
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…