The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute arbitrary commands in the basic operating system.

🗓️ 28 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Cisco Firepower Management Center web interface flaw enables root command execution via crafted web requests.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2024-20424	23 Oct 202420:45	–	circl
Cisco	Cisco Secure Firewall Management Center Software Command Injection Vulnerability	23 Oct 202416:00	–	cisco
CNNVD	Cisco Secure Firewall Management Center 安全漏洞	23 Oct 202400:00	–	cnnvd
CNVD	Cisco Secure Firewall Management Center Command Injection Vulnerability	28 Oct 202400:00	–	cnvd
CVE	CVE-2024-20424	23 Oct 202417:46	–	cve
Cvelist	CVE-2024-20424	23 Oct 202417:46	–	cvelist
EUVD	EUVD-2024-18139	3 Oct 202520:07	–	euvd
NVD	CVE-2024-20424	23 Oct 202418:15	–	nvd
OSV	CVE-2024-20424	23 Oct 202418:15	–	osv
Positive Technologies	PT-2024-7254 · Cisco · Cisco Ftd +1	23 Oct 202400:00	–	ptsecurity

Vulners

Node

cisco_systems cisco_firepower_management_centerMatch6.2.3

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.6

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.1

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.2

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.11

OR

cisco_systems cisco_firepower_management_centerMatch6.7.0

OR

cisco_systems cisco_firepower_management_centerMatch6.6.0

OR

cisco_systems cisco_firepower_management_centerMatch6.6.0.1

OR

cisco_systems cisco_firepower_management_centerMatch6.6.1

OR

cisco_systems cisco_firepower_management_centerMatch6.6.3

OR

cisco_systems cisco_firepower_management_centerMatch6.6.4

OR

cisco_systems cisco_firepower_management_centerMatch6.6.7

OR

cisco_systems cisco_firepower_management_centerMatch7.0.0

OR

cisco_systems cisco_firepower_management_centerMatch7.0.0.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.1.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.2

OR

cisco_systems cisco_firepower_management_centerMatch7.0.2.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.3

OR

cisco_systems cisco_firepower_management_centerMatch7.0.4

OR

cisco_systems cisco_firepower_management_centerMatch7.2.0

OR

cisco_systems cisco_firepower_management_centerMatch7.2.1

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.3

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.4

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.5

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.7

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.9

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.10

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.11

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.12

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.13

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.14

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.15

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.16

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.17

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.18

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.1

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.3

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.2

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.4

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.5

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.6

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.7

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.8

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.9

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.10

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.12

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.13

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.14

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.15

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.16

OR

cisco_systems cisco_firepower_management_centerMatch6.6.5

OR

cisco_systems cisco_firepower_management_centerMatch6.6.5.1

OR

cisco_systems cisco_firepower_management_centerMatch6.6.5.2

OR

cisco_systems cisco_firepower_management_centerMatch6.6.7.1

OR

cisco_systems cisco_firepower_management_centerMatch6.7.0.1

OR

cisco_systems cisco_firepower_management_centerMatch6.7.0.2

OR

cisco_systems cisco_firepower_management_centerMatch6.7.0.3

OR

cisco_systems cisco_firepower_management_centerMatch7.0.5

OR

cisco_systems cisco_firepower_management_centerMatch7.1.0

OR

cisco_systems cisco_firepower_management_centerMatch7.1.0.1

OR

cisco_systems cisco_firepower_management_centerMatch7.1.0.2

OR

cisco_systems cisco_firepower_management_centerMatch7.1.0.3

OR

cisco_systems cisco_firepower_management_centerMatch7.2.2

OR

cisco_systems cisco_firepower_management_centerMatch7.2.0.1

OR

cisco_systems cisco_firepower_management_centerMatch7.2.3

OR

cisco_systems cisco_firepower_management_centerMatch7.2.3.1

OR

cisco_systems cisco_firepower_management_centerMatch7.3.0

OR

cisco_systems cisco_firepower_management_centerMatch7.3.1

OR

cisco_systems cisco_firepower_management_centerMatch7.3.1.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.6

OR

cisco_systems cisco_firepower_management_centerMatch7.2.4.1

OR

cisco_systems cisco_firepower_management_centerMatch7.3.1.2

OR

cisco_systems cisco_firepower_management_centerMatch7.2.4

OR

cisco_systems cisco_firepower_management_centerMatch7.2.5

OR

cisco_systems cisco_firepower_management_centerMatch7.4.0

OR

cisco_systems cisco_firepower_management_centerMatch7.4.1

OR

cisco_systems cisco_firepower_management_centerMatch7.4.1.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.6.1

OR

cisco_systems cisco_firepower_management_centerMatch7.0.6.2

OR

cisco_systems cisco_firepower_management_centerMatch7.2.5.1

OR

cisco_systems cisco_firepower_management_centerMatch7.2.6

OR

cisco_systems cisco_firepower_management_centerMatch7.2.7

OR

cisco_systems cisco_firepower_management_centerMatch7.2.5.2

OR

cisco_systems cisco_firepower_management_centerMatch7.2.8

OR

cisco_systems cisco_firepower_management_centerMatch7.2.8.1

OR

cisco_systems cisco_firepower_management_centerMatch6.2.3.8

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.17

OR

cisco_systems cisco_firepower_management_centerMatch6.4.0.18

OR

cisco_systems cisco_firepower_management_centerMatch6.6.7.2

OR

cisco_systems cisco_firepower_management_centerMatch7.4.2

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-v3AWDqN7
web	www.web.nvd.nist.gov/view/vuln/detail

28 Oct 2024 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 29

CVSS 39.9

EPSS0.00941

Firepower Management Center web interface vulnerability root privileges command execution crafted web requests