The vulnerability of Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD’s) network interface layers allows attackers to read or write arbitrary files on a peer-to-peer device connected to the sftunnel.

🗓️ 18 Dec 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

Path traversal in Cisco Firepower FMC and FTD sftunnel allows reading or writing arbitrary files on a peer device.

Reporter	Title	Published	Views	Family All 10
Cisco	Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability	21 Oct 202016:00	–	cisco
CNVD	Cisco Firepower Threat Defense sfmgr Command Directory Traversal Vulnerability	26 Oct 202000:00	–	cnvd
CVE	CVE-2020-3550	21 Oct 202018:35	–	cve
Cvelist	CVE-2020-3550 Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability	21 Oct 202018:35	–	cvelist
EUVD	EUVD-2020-24821	7 Oct 202500:30	–	euvd
NVD	CVE-2020-3550	21 Oct 202019:15	–	nvd
OSV	CVE-2020-3550	21 Oct 202019:15	–	osv
Prion	Directory traversal	21 Oct 202019:15	–	prion
Positive Technologies	PT-2020-5099 · Cisco · Cisco Firepower Management Center +1	21 Oct 202000:00	–	ptsecurity
Vulnrichment	CVE-2020-3550 Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability	21 Oct 202018:35	–	vulnrichment

Vulners

Node

OR

cisco_systems firepower_threat_defenseMatch6.2.0

cisco_systems firepower_threat_defenseMatch6.2.1

cisco_systems cisco_firepower_management_centerMatch6.2.0

cisco_systems cisco_firepower_management_centerMatch6.2.1

cisco_systems firepower_threat_defenseRange6.3.0–6.3.0.6

cisco_systems firepower_threat_defenseRange6.4.0–6.4.0.10

cisco_systems firepower_threat_defenseRange6.6.0–6.6.1

cisco_systems cisco_firepower_management_centerRange6.6.0–6.6.1

cisco_systems cisco_firepower_management_centerRange≤6.0.1

cisco_systems cisco_firepower_management_centerRange6.3.0–6.3.0.6

cisco_systems cisco_firepower_management_centerRange6.4.0–6.4.0.10

cisco_systems firepower_threat_defenseRange≤6.0.1

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdfmc-dirtrav-NW8XcuSB
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-3550
web	www.web.nvd.nist.gov/view/vuln/detail

18 Dec 2020 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 38.1

CVSS 28.5

EPSS0.02205

Cisco Firepower Firepower Threat Defense sftunnel path traversal arbitrary file access