gsd-2023-20219
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The attacker would need valid device credentials but does not require administrator privileges to exploit this vulnerability. These vulnerabilities are due to insufficient validation of user-supplied input for certain configuration options. An attacker could exploit these vulnerabilities by using crafted input within the device configuration GUI. A successful exploit could allow the attacker to execute arbitrary commands on the device including the underlying operating system which could also affect the availability of the device.
Aliases
Aliases
{ GSD: { alias: "CVE-2023-20219", id: "GSD-2023-20219", }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2023-20219", ], details: "Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The attacker would need valid device credentials but does not require administrator privileges to exploit this vulnerability. These vulnerabilities are due to insufficient validation of user-supplied input for certain configuration options. An attacker could exploit these vulnerabilities by using crafted input within the device configuration GUI. A successful exploit could allow the attacker to execute arbitrary commands on the device including the underlying operating system which could also affect the availability of the device.", id: "GSD-2023-20219", modified: "2023-12-13T01:20:27.836770Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "psirt@cisco.com", ID: "CVE-2023-20219", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Cisco Firepower Management Center", version: { version_data: [ { version_affected: "=", version_value: "6.7.0", }, { version_affected: "=", version_value: "6.7.0.1", }, { version_affected: "=", version_value: "6.7.0.2", }, { version_affected: "=", version_value: "6.7.0.3", }, { version_affected: "=", version_value: "7.0.0", }, { version_affected: "=", version_value: "7.0.0.1", }, { version_affected: "=", version_value: "7.0.1", }, { version_affected: "=", version_value: "7.0.1.1", }, { version_affected: "=", version_value: "7.0.2", }, { version_affected: "=", version_value: "7.0.2.1", }, { version_affected: "=", version_value: "7.0.3", }, { version_affected: "=", version_value: "7.0.4", }, { version_affected: "=", version_value: "7.0.5", }, { version_affected: "=", version_value: "7.1.0", }, { version_affected: "=", version_value: "7.1.0.1", }, { version_affected: "=", version_value: "7.1.0.2", }, { version_affected: "=", version_value: "7.1.0.3", }, { version_affected: "=", version_value: "7.2.0", }, { version_affected: "=", version_value: "7.2.1", }, { version_affected: "=", version_value: "7.2.2", }, { version_affected: "=", version_value: "7.2.0.1", }, { version_affected: "=", version_value: "7.2.3", }, { version_affected: "=", version_value: "7.2.3.1", }, { version_affected: "=", version_value: "7.2.4", }, { version_affected: "=", version_value: "7.3.0", }, { version_affected: "=", version_value: "7.3.1", }, { version_affected: "=", version_value: "7.3.1.1", }, ], }, }, ], }, vendor_name: "Cisco", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The attacker would need valid device credentials but does not require administrator privileges to exploit this vulnerability. These vulnerabilities are due to insufficient validation of user-supplied input for certain configuration options. An attacker could exploit these vulnerabilities by using crafted input within the device configuration GUI. A successful exploit could allow the attacker to execute arbitrary commands on the device including the underlying operating system which could also affect the availability of the device.", }, ], }, exploit: [ { lang: "en", value: "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.", }, ], impact: { cvss: [ { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.2, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, ], }, problemtype: { problemtype_data: [ { description: [ { cweId: "CWE-78", lang: "eng", value: "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", }, ], }, ], }, references: { reference_data: [ { name: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmdinj-bTEgufOX", refsource: "MISC", url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmdinj-bTEgufOX", }, ], }, source: { advisory: "cisco-sa-fmc-cmdinj-bTEgufOX", defects: [ "CSCwf63210", ], discovery: "EXTERNAL", }, }, "nvd.nist.gov": { cve: { configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*", matchCriteriaId: "B6BF3D02-3BA0-4736-B78D-3634E3E91623", versionEndIncluding: "6.2.3.18", versionStartIncluding: "6.2.3", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*", matchCriteriaId: "6FBA1598-02FE-4855-8449-E2FF06EF8276", versionEndIncluding: "6.4.0.16", versionStartIncluding: "6.4.0", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*", matchCriteriaId: "AF3259C7-8F36-46B1-A1BA-C2F9AC165A2D", versionEndIncluding: "6.6.7.1", versionStartIncluding: "6.6.0", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*", matchCriteriaId: "0BE29E8B-5D64-4CF6-B8CB-A38E991A9BB9", versionEndIncluding: "7.0.5", versionStartIncluding: "7.0.0", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*", matchCriteriaId: "749D90E8-9009-4F05-8C5E-2521A9BC7D32", versionEndIncluding: "7.1.0.3", versionStartIncluding: "7.1.0", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*", matchCriteriaId: "D44E33FB-20A2-448B-A901-3BD383E45F2B", versionEndIncluding: "7.2.3.1", versionStartIncluding: "7.2.0", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*", matchCriteriaId: "E355BD8E-18E7-4405-8F32-0A191DCE0774", versionEndIncluding: "7.3.1.1", versionStartIncluding: "7.3.0", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], descriptions: [ { lang: "en", value: "Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The attacker would need valid device credentials but does not require administrator privileges to exploit this vulnerability. These vulnerabilities are due to insufficient validation of user-supplied input for certain configuration options. An attacker could exploit these vulnerabilities by using crafted input within the device configuration GUI. A successful exploit could allow the attacker to execute arbitrary commands on the device including the underlying operating system which could also affect the availability of the device.", }, { lang: "es", value: "Múltiples vulnerabilidades en la interfaz de administración web del software Cisco Firepower Management Center (FMC) podrían permitir que un atacante remoto autenticado ejecute comandos arbitrarios en el sistema operativo subyacente. El atacante necesitaría credenciales de dispositivo válidas, pero no necesitaría privilegios de administrador para aprovechar esta vulnerabilidad. Estas vulnerabilidades se deben a una validación insuficiente de la entrada proporcionada por el usuario para ciertas opciones de configuración. Un atacante podría aprovechar estas vulnerabilidades utilizando entradas manipuladas dentro de la GUI de configuración del dispositivo. Un exploit exitoso podría permitir al atacante ejecutar comandos arbitrarios en el dispositivo, incluido el sistema operativo subyacente, lo que también podría afectar la disponibilidad del dispositivo.", }, ], id: "CVE-2023-20219", lastModified: "2024-01-25T17:15:37.973", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 2.8, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.2, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 1.2, impactScore: 5.9, source: "ykramarz@cisco.com", type: "Secondary", }, ], }, published: "2023-11-01T18:15:09.460", references: [ { source: "ykramarz@cisco.com", tags: [ "Vendor Advisory", ], url: "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmdinj-bTEgufOX", }, ], sourceIdentifier: "ykramarz@cisco.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-77", }, ], source: "nvd@nist.gov", type: "Primary", }, { description: [ { lang: "en", value: "CWE-78", }, ], source: "ykramarz@cisco.com", type: "Secondary", }, ], }, }, }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.