Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vhwf-m5vw-3pfx

Опубликовано: 01 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability is due to a lack of input sanitation. An attacker could exploit this vulnerability by sending a crafted HTTPS request. A successful exploit could allow the attacker to download arbitrary files from the affected system.

A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability is due to a lack of input sanitation. An attacker could exploit this vulnerability by sending a crafted HTTPS request. A successful exploit could allow the attacker to download arbitrary files from the affected system.

EPSS

Процентиль: 38%
0.00164
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20
CWE-73

Связанные уязвимости

CVSS3: 6.5
nvd
больше 2 лет назад

A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability is due to a lack of input sanitation. An attacker could exploit this vulnerability by sending a crafted HTTPS request. A successful exploit could allow the attacker to download arbitrary files from the affected system.

CVSS3: 6.5
fstec
больше 2 лет назад

Уязвимость функции загрузки файлов программного обеспечения администрирования сети Cisco Firepower Management Center (FMC), позволяющая нарушителю загружать произвольные файлы

EPSS

Процентиль: 38%
0.00164
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20
CWE-73