BDU:2026-02531

Опубликовано: 04 мар. 2026

Источник: fstec

CVSS3: 10

CVSS2: 10

EPSS Средний

Описание

Уязвимость веб-интерфейса управления программного обеспечения администрирования сети Cisco Secure Firewall Management Center (ранее Cisco Firepower Management Center) связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код с правами root путем отправки специально сформированных запросов

Вендор

Cisco Systems Inc.

Наименование ПО

Cisco Secure Firewall Management Center

Версия ПО

6.4.0.13 (Cisco Secure Firewall Management Center)

6.4.0.14 (Cisco Secure Firewall Management Center)

6.4.0.15 (Cisco Secure Firewall Management Center)

6.4.0.16 (Cisco Secure Firewall Management Center)

6.4.0.17 (Cisco Secure Firewall Management Center)

6.4.0.18 (Cisco Secure Firewall Management Center)

7.0.0 (Cisco Secure Firewall Management Center)

7.0.0.1 (Cisco Secure Firewall Management Center)

7.0.1 (Cisco Secure Firewall Management Center)

7.0.1.1 (Cisco Secure Firewall Management Center)

7.0.2 (Cisco Secure Firewall Management Center)

7.0.2.1 (Cisco Secure Firewall Management Center)

7.0.3 (Cisco Secure Firewall Management Center)

7.0.4 (Cisco Secure Firewall Management Center)

7.0.5 (Cisco Secure Firewall Management Center)

7.0.6 (Cisco Secure Firewall Management Center)

7.0.6.1 (Cisco Secure Firewall Management Center)

7.0.6.2 (Cisco Secure Firewall Management Center)

7.1.0.1 (Cisco Secure Firewall Management Center)

7.1.0.2 (Cisco Secure Firewall Management Center)

7.1.0.3 (Cisco Secure Firewall Management Center)

7.2.0.1 (Cisco Secure Firewall Management Center)

7.2.3.1 (Cisco Secure Firewall Management Center)

7.2.4.1 (Cisco Secure Firewall Management Center)

7.2.5.1 (Cisco Secure Firewall Management Center)

7.2.5.2 (Cisco Secure Firewall Management Center)

7.2.8.1 (Cisco Secure Firewall Management Center)

7.3.1.1 (Cisco Secure Firewall Management Center)

7.3.1.2 (Cisco Secure Firewall Management Center)

7.4.1.1 (Cisco Secure Firewall Management Center)

7.0.7 (Cisco Secure Firewall Management Center)

7.7.0 (Cisco Secure Firewall Management Center)

7.0.6.3 (Cisco Secure Firewall Management Center)

7.0.8 (Cisco Secure Firewall Management Center)

7.0.8.1 (Cisco Secure Firewall Management Center)

7.1.0 (Cisco Secure Firewall Management Center)

7.2.0 (Cisco Secure Firewall Management Center)

7.2.1 (Cisco Secure Firewall Management Center)

7.2.2 (Cisco Secure Firewall Management Center)

7.2.3 (Cisco Secure Firewall Management Center)

7.2.4 (Cisco Secure Firewall Management Center)

7.2.5 (Cisco Secure Firewall Management Center)

7.2.6 (Cisco Secure Firewall Management Center)

7.2.7 (Cisco Secure Firewall Management Center)

7.2.8 (Cisco Secure Firewall Management Center)

7.2.9 (Cisco Secure Firewall Management Center)

7.2.10 (Cisco Secure Firewall Management Center)

7.2.10.2 (Cisco Secure Firewall Management Center)

7.2.10.1 (Cisco Secure Firewall Management Center)

7.3.0 (Cisco Secure Firewall Management Center)

7.3.1 (Cisco Secure Firewall Management Center)

7.4.0 (Cisco Secure Firewall Management Center)

7.4.1 (Cisco Secure Firewall Management Center)

7.4.2 (Cisco Secure Firewall Management Center)

7.4.2.1 (Cisco Secure Firewall Management Center)

7.4.2.2 (Cisco Secure Firewall Management Center)

7.4.2.3 (Cisco Secure Firewall Management Center)

7.4.2.4 (Cisco Secure Firewall Management Center)

7.4.3 (Cisco Secure Firewall Management Center)

7.4.4 (Cisco Secure Firewall Management Center)

7.4.5 (Cisco Secure Firewall Management Center)

7.6.0 (Cisco Secure Firewall Management Center)

7.6.1 (Cisco Secure Firewall Management Center)

7.6.2 (Cisco Secure Firewall Management Center)

7.6.2.1 (Cisco Secure Firewall Management Center)

7.6.3 (Cisco Secure Firewall Management Center)

7.6.4 (Cisco Secure Firewall Management Center)

7.7.10 (Cisco Secure Firewall Management Center)

7.7.10.1 (Cisco Secure Firewall Management Center)

7.7.11 (Cisco Secure Firewall Management Center)

10.0.0 (Cisco Secure Firewall Management Center)

Тип ПО

ПО программно-аппаратных средств защиты

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Критический уровень опасности (базовая оценка CVSS 2.0 составляет 10)

Критический уровень опасности (базовая оценка CVSS 3.1 составляет 10)

Возможные меры по устранению уязвимости

Установка обновлений из доверенных источников. В связи со сложившейся обстановкой и введенными санкциями против Российской Федерации рекомендуется устанавливать обновления программного обеспечения только после оценки всех сопутствующих рисков.

Компенсирующие меры:

- использование средств межсетевого экранирования уровня веб-приложений (WAF) для фильтрации сетевого трафика;

- ограничение доступа к уязвимому программному обеспечению, используя схему доступа по «белым спискам»;

- использование SIEM-систем для отслеживания событий, связанных с действием пользователей с правами root;

- ограничение доступа из внешних сетей (Интернет).

Использование рекомендаций:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Существует

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2026-20131
CVE

EPSS

Процентиль: 98%

0.31231

Средний

10 Critical

CVSS3

10 Critical

CVSS2

Связанные уязвимости

CVE-2026-20131

CVSS3: 10

nvd

6 месяцев назад

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Java byte stream. An attacker could exploit this vulnerability by sending a crafted serialized Java object to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate privileges to root. Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.

GHSA-r229-mj76-g2qx

CVSS3: 10

github

6 месяцев назад

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Java byte stream. An attacker could exploit this vulnerability by sending a crafted serialized Java object to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate privileges to root. Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.

EPSS

Процентиль: 98%

0.31231

Средний

10 Critical

CVSS3

10 Critical

CVSS2