Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-12687

Опубликовано: 02 окт. 2019
Источник: nvd
CVSS3: 8.8
CVSS3: 8.8
CVSS2: 9
EPSS Низкий

Описание

A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to execute arbitrary commands within the affected device.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3:*:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.01126
Низкий

8.8 High

CVSS3

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-119
CWE-20

Связанные уязвимости

CVSS3: 8.8
github
больше 3 лет назад

A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to execute arbitrary commands within the affected device.

CVSS3: 8.8
fstec
больше 6 лет назад

Уязвимость веб-интерфейса (Web UI) программно-аппаратного средства администрирования решений сетевой безопасности Cisco Firepower Management Center, позволяющая нарушителю выполнить произвольные команды на уязвимом устройстве

EPSS

Процентиль: 78%
0.01126
Низкий

8.8 High

CVSS3

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-119
CWE-20