BDU:2026-06300

Опубликовано: 04 мар. 2026

Источник: fstec

CVSS3: 10

CVSS2: 10

EPSS Средний

Описание

Уязвимость веб-интерфейса программного обеспечения администрирования сети Cisco Secure Firewall Management Center (ранее Cisco Firepower Management Center) связана с обходом аутентификации с использованием альтернативного пути или канала. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти ограничения безопасности, выполнить произвольный код и повысить свои привилегии

Вендор

Cisco Systems Inc.

Наименование ПО

Cisco Secure Firewall Management Center

Версия ПО

7.0.0 (Cisco Secure Firewall Management Center)

7.0.0.1 (Cisco Secure Firewall Management Center)

7.0.1 (Cisco Secure Firewall Management Center)

7.0.1.1 (Cisco Secure Firewall Management Center)

7.0.2 (Cisco Secure Firewall Management Center)

7.0.2.1 (Cisco Secure Firewall Management Center)

7.0.3 (Cisco Secure Firewall Management Center)

7.0.4 (Cisco Secure Firewall Management Center)

7.0.5 (Cisco Secure Firewall Management Center)

7.0.6 (Cisco Secure Firewall Management Center)

7.0.6.1 (Cisco Secure Firewall Management Center)

7.0.6.2 (Cisco Secure Firewall Management Center)

7.1.0.1 (Cisco Secure Firewall Management Center)

7.1.0.2 (Cisco Secure Firewall Management Center)

7.1.0.3 (Cisco Secure Firewall Management Center)

7.2.0.1 (Cisco Secure Firewall Management Center)

7.2.3.1 (Cisco Secure Firewall Management Center)

7.2.4.1 (Cisco Secure Firewall Management Center)

7.2.5.1 (Cisco Secure Firewall Management Center)

7.2.5.2 (Cisco Secure Firewall Management Center)

7.2.8.1 (Cisco Secure Firewall Management Center)

7.3.1.1 (Cisco Secure Firewall Management Center)

7.3.1.2 (Cisco Secure Firewall Management Center)

7.4.1.1 (Cisco Secure Firewall Management Center)

7.0.7 (Cisco Secure Firewall Management Center)

7.7.0 (Cisco Secure Firewall Management Center)

7.0.6.3 (Cisco Secure Firewall Management Center)

7.0.8 (Cisco Secure Firewall Management Center)

7.0.8.1 (Cisco Secure Firewall Management Center)

7.1.0 (Cisco Secure Firewall Management Center)

7.2.0 (Cisco Secure Firewall Management Center)

7.2.1 (Cisco Secure Firewall Management Center)

7.2.2 (Cisco Secure Firewall Management Center)

7.2.3 (Cisco Secure Firewall Management Center)

7.2.4 (Cisco Secure Firewall Management Center)

7.2.5 (Cisco Secure Firewall Management Center)

7.2.6 (Cisco Secure Firewall Management Center)

7.2.7 (Cisco Secure Firewall Management Center)

7.2.8 (Cisco Secure Firewall Management Center)

7.2.9 (Cisco Secure Firewall Management Center)

7.2.10 (Cisco Secure Firewall Management Center)

7.2.10.2 (Cisco Secure Firewall Management Center)

7.2.10.1 (Cisco Secure Firewall Management Center)

7.3.0 (Cisco Secure Firewall Management Center)

7.3.1 (Cisco Secure Firewall Management Center)

7.4.0 (Cisco Secure Firewall Management Center)

7.4.1 (Cisco Secure Firewall Management Center)

7.4.2 (Cisco Secure Firewall Management Center)

7.4.2.1 (Cisco Secure Firewall Management Center)

7.4.2.2 (Cisco Secure Firewall Management Center)

7.4.2.3 (Cisco Secure Firewall Management Center)

7.4.2.4 (Cisco Secure Firewall Management Center)

7.4.3 (Cisco Secure Firewall Management Center)

7.6.0 (Cisco Secure Firewall Management Center)

7.6.1 (Cisco Secure Firewall Management Center)

7.6.2 (Cisco Secure Firewall Management Center)

7.6.2.1 (Cisco Secure Firewall Management Center)

7.6.3 (Cisco Secure Firewall Management Center)

7.7.10 (Cisco Secure Firewall Management Center)

7.7.10.1 (Cisco Secure Firewall Management Center)

7.7.11 (Cisco Secure Firewall Management Center)

Тип ПО

ПО программно-аппаратных средств защиты

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Критический уровень опасности (базовая оценка CVSS 2.0 составляет 10)

Критический уровень опасности (базовая оценка CVSS 3.1 составляет 10)

Возможные меры по устранению уязвимости

Использование рекомендаций:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Существует в открытом доступе

Информация об устранении

Уязвимость устранена

Ссылки на источники

Идентификаторы других систем описаний уязвимостей

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2026-20079
CVE

EPSS

Процентиль: 98%

0.387

Средний

10 Critical

CVSS3

10 Critical

CVSS2

Связанные уязвимости

CVE-2026-20079

CVSS3: 10

nvd

5 месяцев назад

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.  This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow root access to the device. 

GHSA-mv8w-c2qv-cgrg

CVSS3: 10

github

5 месяцев назад

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow root access to the device.

EPSS

Процентиль: 98%

0.387

Средний

10 Critical

CVSS3

10 Critical

CVSS2