BDU:2025-11005

Опубликовано: 10 окт. 2024

Источник: fstec

CVSS3: 4.9

CVSS2: 6.8

EPSS Низкий

Описание

Уязвимость программного обеспечения администрирования сети Cisco Secure Firewall Management Center (ранее Cisco Firepower Management Center) связана с недостаточной проверкой введенных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации

Вендор

Cisco Systems Inc.

Наименование ПО

Cisco Firepower Management Center

Версия ПО

6.2.3 (Cisco Firepower Management Center)

6.4.0 (Cisco Firepower Management Center)

6.2.3.6 (Cisco Firepower Management Center)

6.2.3.1 (Cisco Firepower Management Center)

6.2.3.2 (Cisco Firepower Management Center)

6.4.0.11 (Cisco Firepower Management Center)

6.6.0 (Cisco Firepower Management Center)

6.6.0.1 (Cisco Firepower Management Center)

6.6.1 (Cisco Firepower Management Center)

6.6.3 (Cisco Firepower Management Center)

6.6.4 (Cisco Firepower Management Center)

6.6.7 (Cisco Firepower Management Center)

7.0.0 (Cisco Firepower Management Center)

7.0.0.1 (Cisco Firepower Management Center)

7.0.1 (Cisco Firepower Management Center)

7.0.1.1 (Cisco Firepower Management Center)

7.0.2 (Cisco Firepower Management Center)

7.0.2.1 (Cisco Firepower Management Center)

7.0.3 (Cisco Firepower Management Center)

7.0.4 (Cisco Firepower Management Center)

7.2.0 (Cisco Firepower Management Center)

7.2.1 (Cisco Firepower Management Center)

6.2.3.3 (Cisco Firepower Management Center)

6.2.3.4 (Cisco Firepower Management Center)

6.2.3.5 (Cisco Firepower Management Center)

6.2.3.7 (Cisco Firepower Management Center)

6.2.3.9 (Cisco Firepower Management Center)

6.2.3.10 (Cisco Firepower Management Center)

6.2.3.11 (Cisco Firepower Management Center)

6.2.3.12 (Cisco Firepower Management Center)

6.2.3.13 (Cisco Firepower Management Center)

6.2.3.14 (Cisco Firepower Management Center)

6.2.3.15 (Cisco Firepower Management Center)

6.2.3.16 (Cisco Firepower Management Center)

6.2.3.17 (Cisco Firepower Management Center)

6.2.3.18 (Cisco Firepower Management Center)

6.4.0.1 (Cisco Firepower Management Center)

6.4.0.3 (Cisco Firepower Management Center)

6.4.0.2 (Cisco Firepower Management Center)

6.4.0.4 (Cisco Firepower Management Center)

6.4.0.5 (Cisco Firepower Management Center)

6.4.0.6 (Cisco Firepower Management Center)

6.4.0.7 (Cisco Firepower Management Center)

6.4.0.8 (Cisco Firepower Management Center)

6.4.0.9 (Cisco Firepower Management Center)

6.4.0.10 (Cisco Firepower Management Center)

6.4.0.12 (Cisco Firepower Management Center)

6.4.0.13 (Cisco Firepower Management Center)

6.4.0.14 (Cisco Firepower Management Center)

6.4.0.15 (Cisco Firepower Management Center)

6.4.0.16 (Cisco Firepower Management Center)

6.6.5 (Cisco Firepower Management Center)

6.6.5.1 (Cisco Firepower Management Center)

6.6.5.2 (Cisco Firepower Management Center)

6.6.7.1 (Cisco Firepower Management Center)

7.0.5 (Cisco Firepower Management Center)

7.2.2 (Cisco Firepower Management Center)

7.2.0.1 (Cisco Firepower Management Center)

7.2.3 (Cisco Firepower Management Center)

7.2.3.1 (Cisco Firepower Management Center)

7.3.0 (Cisco Firepower Management Center)

7.3.1 (Cisco Firepower Management Center)

7.3.1.1 (Cisco Firepower Management Center)

7.0.6 (Cisco Firepower Management Center)

7.2.4.1 (Cisco Firepower Management Center)

7.3.1.2 (Cisco Firepower Management Center)

7.2.4 (Cisco Firepower Management Center)

7.2.5 (Cisco Firepower Management Center)

7.0.6.1 (Cisco Firepower Management Center)

7.0.6.2 (Cisco Firepower Management Center)

7.2.5.1 (Cisco Firepower Management Center)

7.2.6 (Cisco Firepower Management Center)

7.2.7 (Cisco Firepower Management Center)

7.2.5.2 (Cisco Firepower Management Center)

7.2.8 (Cisco Firepower Management Center)

7.2.8.1 (Cisco Firepower Management Center)

6.2.3.8 (Cisco Firepower Management Center)

6.4.0.17 (Cisco Firepower Management Center)

6.4.0.18 (Cisco Firepower Management Center)

6.6.7.2 (Cisco Firepower Management Center)

7.0.6.3 (Cisco Firepower Management Center)

7.2.9 (Cisco Firepower Management Center)

Тип ПО

ПО программно-аппаратных средств защиты

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Средний уровень опасности (базовая оценка CVSS 2.0 составляет 6,8)

Средний уровень опасности (базовая оценка CVSS 3.1 составляет 4,9)

Возможные меры по устранению уязвимости

Использовать рекомендации:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xpathinj-COrThdMb

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 15%

0.00049

Низкий

4.9 Medium

CVSS3

6.8 Medium

CVSS2

Связанные уязвимости

CVE-2025-20218

CVSS3: 4.9

nvd

около 1 месяца назад

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to retrieve sensitive information from the affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.

GHSA-wxr2-pwc5-7wgv

CVSS3: 4.9

github

около 1 месяца назад

EPSS

Процентиль: 15%

0.00049

Низкий

4.9 Medium

CVSS3

6.8 Medium

CVSS2