cnvd - cnvd-2024-41676

CNVD-2024-41676

Vulnerability from cnvd - Published: 2024-10-23

Title

Cisco Firepower Management Center SQL注入漏洞（CNVD-2024-41676）

Description

Cisco Firepower Management Center（FMC）是美国思科（Cisco）公司的新一代防火墙管理中心软件。 Cisco Firepower Management Center存在SQL注入漏洞，该漏洞源于基于Web的管理界面无法充分验证用户输入。远程攻击者可以利用该漏洞发送精心设计的SQL查询导致从数据库获取任何数据、在底层操作系统上执行任意命令以及将权限提升至root。

Severity

高

Patch Name

Cisco Firepower Management Center SQL注入漏洞（CNVD-2024-41676）的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sqli-WFFDnNOs

Reference

https://nvd.nist.gov/vuln/detail/CVE-2024-20360

Impacted products

Name
['Cisco Cisco Firepower Management Center 7.0.0', 'Cisco Cisco Firepower Management Center 7.0.0.1', 'Cisco Cisco Firepower Management Center 7.0.1', 'Cisco Cisco Firepower Management Center 7.0.1.1', 'Cisco Cisco Firepower Management Center 7.0.2', 'Cisco Cisco Firepower Management Center 7.0.2.1', 'Cisco Cisco Firepower Management Center 7.0.3', 'Cisco Cisco Firepower Management Center 7.0.4', 'Cisco Cisco Firepower Management Center 7.0.5', 'Cisco Cisco Firepower Management Center 7.0.6', 'Cisco Cisco Firepower Management Center 7.1.0', 'Cisco Cisco Firepower Management Center 7.1.0.1', 'Cisco Cisco Firepower Management Center 7.1.0.2', 'Cisco Cisco Firepower Management Center 7.1.0.3', 'Cisco Cisco Firepower Management Center 7.2.0', 'Cisco Cisco Firepower Management Center 7.2.1', 'Cisco Cisco Firepower Management Center 7.2.2', 'Cisco Cisco Firepower Management Center 7.2.0.1', 'Cisco Cisco Firepower Management Center 7.2.3', 'Cisco Cisco Firepower Management Center 7.2.3.1', 'Cisco Cisco Firepower Management Center 7.2.4', 'Cisco Cisco Firepower Management Center 7.2.4.1', 'Cisco Cisco Firepower Management Center 7.2.5', 'Cisco Cisco Firepower Management Center 7.3.0', 'Cisco Cisco Firepower Management Center 7.3.1', 'Cisco Cisco Firepower Management Center 7.3.1.1', 'Cisco Cisco Firepower Management Center 7.3.1.2']

Name

['Cisco Cisco Firepower Management Center 7.0.0', 'Cisco Cisco Firepower Management Center 7.0.0.1', 'Cisco Cisco Firepower Management Center 7.0.1', 'Cisco Cisco Firepower Management Center 7.0.1.1', 'Cisco Cisco Firepower Management Center 7.0.2', 'Cisco Cisco Firepower Management Center 7.0.2.1', 'Cisco Cisco Firepower Management Center 7.0.3', 'Cisco Cisco Firepower Management Center 7.0.4', 'Cisco Cisco Firepower Management Center 7.0.5', 'Cisco Cisco Firepower Management Center 7.0.6', 'Cisco Cisco Firepower Management Center 7.1.0', 'Cisco Cisco Firepower Management Center 7.1.0.1', 'Cisco Cisco Firepower Management Center 7.1.0.2', 'Cisco Cisco Firepower Management Center 7.1.0.3', 'Cisco Cisco Firepower Management Center 7.2.0', 'Cisco Cisco Firepower Management Center 7.2.1', 'Cisco Cisco Firepower Management Center 7.2.2', 'Cisco Cisco Firepower Management Center 7.2.0.1', 'Cisco Cisco Firepower Management Center 7.2.3', 'Cisco Cisco Firepower Management Center 7.2.3.1', 'Cisco Cisco Firepower Management Center 7.2.4', 'Cisco Cisco Firepower Management Center 7.2.4.1', 'Cisco Cisco Firepower Management Center 7.2.5', 'Cisco Cisco Firepower Management Center 7.3.0', 'Cisco Cisco Firepower Management Center 7.3.1', 'Cisco Cisco Firepower Management Center 7.3.1.1', 'Cisco Cisco Firepower Management Center 7.3.1.2']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-20360",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-20360"
    }
  },
  "description": "Cisco Firepower Management Center\uff08FMC\uff09\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u65b0\u4e00\u4ee3\u9632\u706b\u5899\u7ba1\u7406\u4e2d\u5fc3\u8f6f\u4ef6\u3002\n\nCisco Firepower Management Center\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u57fa\u4e8eWeb\u7684\u7ba1\u7406\u754c\u9762\u65e0\u6cd5\u5145\u5206\u9a8c\u8bc1\u7528\u6237\u8f93\u5165\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u8be5\u6f0f\u6d1e\u53d1\u9001\u7cbe\u5fc3\u8bbe\u8ba1\u7684SQL\u67e5\u8be2\u5bfc\u81f4\u4ece\u6570\u636e\u5e93\u83b7\u53d6\u4efb\u4f55\u6570\u636e\u3001\u5728\u5e95\u5c42\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u547d\u4ee4\u4ee5\u53ca\u5c06\u6743\u9650\u63d0\u5347\u81f3root\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sqli-WFFDnNOs",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-41676",
  "openTime": "2024-10-23",
  "patchDescription": "Cisco Firepower Management Center\uff08FMC\uff09\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u65b0\u4e00\u4ee3\u9632\u706b\u5899\u7ba1\u7406\u4e2d\u5fc3\u8f6f\u4ef6\u3002\r\n\r\nCisco Firepower Management Center\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u57fa\u4e8eWeb\u7684\u7ba1\u7406\u754c\u9762\u65e0\u6cd5\u5145\u5206\u9a8c\u8bc1\u7528\u6237\u8f93\u5165\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u8be5\u6f0f\u6d1e\u53d1\u9001\u7cbe\u5fc3\u8bbe\u8ba1\u7684SQL\u67e5\u8be2\u5bfc\u81f4\u4ece\u6570\u636e\u5e93\u83b7\u53d6\u4efb\u4f55\u6570\u636e\u3001\u5728\u5e95\u5c42\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u547d\u4ee4\u4ee5\u53ca\u5c06\u6743\u9650\u63d0\u5347\u81f3root\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Firepower Management Center SQL\u6ce8\u5165\u6f0f\u6d1e\uff08CNVD-2024-41676\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Cisco Firepower Management Center 7.0.0",
      "Cisco Cisco Firepower Management Center 7.0.0.1",
      "Cisco Cisco Firepower Management Center 7.0.1",
      "Cisco Cisco Firepower Management Center 7.0.1.1",
      "Cisco Cisco Firepower Management Center 7.0.2",
      "Cisco Cisco Firepower Management Center 7.0.2.1",
      "Cisco Cisco Firepower Management Center 7.0.3",
      "Cisco Cisco Firepower Management Center 7.0.4",
      "Cisco Cisco Firepower Management Center 7.0.5",
      "Cisco Cisco Firepower Management Center 7.0.6",
      "Cisco Cisco Firepower Management Center 7.1.0",
      "Cisco Cisco Firepower Management Center 7.1.0.1",
      "Cisco Cisco Firepower Management Center 7.1.0.2",
      "Cisco Cisco Firepower Management Center 7.1.0.3",
      "Cisco Cisco Firepower Management Center 7.2.0",
      "Cisco Cisco Firepower Management Center 7.2.1",
      "Cisco Cisco Firepower Management Center 7.2.2",
      "Cisco Cisco Firepower Management Center 7.2.0.1",
      "Cisco Cisco Firepower Management Center 7.2.3",
      "Cisco Cisco Firepower Management Center 7.2.3.1",
      "Cisco Cisco Firepower Management Center 7.2.4",
      "Cisco Cisco Firepower Management Center 7.2.4.1",
      "Cisco Cisco Firepower Management Center 7.2.5",
      "Cisco Cisco Firepower Management Center 7.3.0",
      "Cisco Cisco Firepower Management Center 7.3.1",
      "Cisco Cisco Firepower Management Center 7.3.1.1",
      "Cisco Cisco Firepower Management Center 7.3.1.2"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2024-20360",
  "serverity": "\u9ad8",
  "submitTime": "2024-05-23",
  "title": "Cisco Firepower Management Center SQL\u6ce8\u5165\u6f0f\u6d1e\uff08CNVD-2024-41676\uff09"
}

CVE-2024-20360 (GCVE-0-2024-20360)

Vulnerability from cvelistv5 – Published: 2024-05-22 17:46 – Updated: 2024-08-01 21:59

Summary

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based management interface does not adequately validate user input. An attacker could exploit this vulnerability by authenticating to the application and sending crafted SQL queries to an affected system. A successful exploit could allow the attacker to obtain any data from the database, execute arbitrary commands on the underlying operating system, and elevate privileges to root. To exploit this vulnerability, an attacker would need at least Read Only user credentials.

Severity ?

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Assigner

cisco

References

URL

Tags

https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

	Vendor	Product	Version
	Cisco	Cisco Firepower Management Center	Affected: 7.0.0 Affected: 7.0.0.1 Affected: 7.0.1 Affected: 7.0.1.1 Affected: 7.0.2 Affected: 7.0.2.1 Affected: 7.0.3 Affected: 7.0.4 Affected: 7.0.5 Affected: 7.0.6 Affected: 7.1.0 Affected: 7.1.0.1 Affected: 7.1.0.2 Affected: 7.1.0.3 Affected: 7.2.0 Affected: 7.2.1 Affected: 7.2.2 Affected: 7.2.0.1 Affected: 7.2.3 Affected: 7.2.3.1 Affected: 7.2.4 Affected: 7.2.4.1 Affected: 7.2.5 Affected: 7.3.0 Affected: 7.3.1 Affected: 7.3.1.1 Affected: 7.3.1.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:cisco:firepower_management_center:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firepower_management_center",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "7.0.0"
              },
              {
                "status": "affected",
                "version": "7.0.0.1"
              },
              {
                "status": "affected",
                "version": "7.0.1"
              },
              {
                "status": "affected",
                "version": "7.0.1.1"
              },
              {
                "status": "affected",
                "version": "7.0.2"
              },
              {
                "status": "affected",
                "version": "7.0.2.1"
              },
              {
                "status": "affected",
                "version": "7.0.3"
              },
              {
                "status": "affected",
                "version": "7.0.4"
              },
              {
                "status": "affected",
                "version": "7.0.5"
              },
              {
                "status": "affected",
                "version": "7.0.6"
              },
              {
                "status": "affected",
                "version": "7.1.0"
              },
              {
                "status": "affected",
                "version": "7.1.0.1"
              },
              {
                "status": "affected",
                "version": "7.1.0.2"
              },
              {
                "status": "affected",
                "version": "7.1.0.3"
              },
              {
                "status": "affected",
                "version": "7.2.0"
              },
              {
                "status": "affected",
                "version": "7.2.1"
              },
              {
                "status": "affected",
                "version": "7.2.2"
              },
              {
                "status": "affected",
                "version": "7.2.0.1"
              },
              {
                "status": "affected",
                "version": "7.2.3"
              },
              {
                "status": "affected",
                "version": "7.2.3.1"
              },
              {
                "status": "affected",
                "version": "7.2.4"
              },
              {
                "status": "affected",
                "version": "7.2.4.1"
              },
              {
                "status": "affected",
                "version": "7.2.5"
              },
              {
                "status": "affected",
                "version": "7.3.0"
              },
              {
                "status": "affected",
                "version": "7.3.1"
              },
              {
                "status": "affected",
                "version": "7.3.1.1"
              },
              {
                "status": "affected",
                "version": "7.3.1.2"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20360",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-23T14:29:11.291846Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:40:39.489Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:59:42.328Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-fmc-sqli-WFFDnNOs",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sqli-WFFDnNOs"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Firepower Management Center",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.0"
            },
            {
              "status": "affected",
              "version": "7.0.0.1"
            },
            {
              "status": "affected",
              "version": "7.0.1"
            },
            {
              "status": "affected",
              "version": "7.0.1.1"
            },
            {
              "status": "affected",
              "version": "7.0.2"
            },
            {
              "status": "affected",
              "version": "7.0.2.1"
            },
            {
              "status": "affected",
              "version": "7.0.3"
            },
            {
              "status": "affected",
              "version": "7.0.4"
            },
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "7.0.6"
            },
            {
              "status": "affected",
              "version": "7.1.0"
            },
            {
              "status": "affected",
              "version": "7.1.0.1"
            },
            {
              "status": "affected",
              "version": "7.1.0.2"
            },
            {
              "status": "affected",
              "version": "7.1.0.3"
            },
            {
              "status": "affected",
              "version": "7.2.0"
            },
            {
              "status": "affected",
              "version": "7.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.2"
            },
            {
              "status": "affected",
              "version": "7.2.0.1"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.2.3.1"
            },
            {
              "status": "affected",
              "version": "7.2.4"
            },
            {
              "status": "affected",
              "version": "7.2.4.1"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.0"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "7.3.1.1"
            },
            {
              "status": "affected",
              "version": "7.3.1.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based management interface does not adequately validate user input. An attacker could exploit this vulnerability by authenticating to the application and sending crafted SQL queries to an affected system. A successful exploit could allow the attacker to obtain any data from the database, execute arbitrary commands on the underlying operating system, and elevate privileges to root. To exploit this vulnerability, an attacker would need at least Read Only user credentials."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-22T17:46:25.091Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-fmc-sqli-WFFDnNOs",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sqli-WFFDnNOs"
        }
      ],
      "source": {
        "advisory": "cisco-sa-fmc-sqli-WFFDnNOs",
        "defects": [
          "CSCwf92182"
        ],
        "discovery": "INTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20360",
    "datePublished": "2024-05-22T17:46:25.091Z",
    "dateReserved": "2023-11-08T15:08:07.650Z",
    "dateUpdated": "2024-08-01T21:59:42.328Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2024-41676

CVE-2024-20360 (GCVE-0-2024-20360)

Tags

Sightings

Nomenclature