The vulnerability in the web interface of the Cisco Secure Firewall Management Center software for network management allows a perpetrator to execute arbitrary code.

🗓️ 31 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Cisco Secure Firewall Management Center web interface SQL injection enables remote arbitrary code execution.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-20471	23 Oct 202420:45	–	circl
CNNVD	Cisco Secure Firewall Management Center 安全漏洞	23 Oct 202400:00	–	cnnvd
CVE	CVE-2024-20471	23 Oct 202417:47	–	cve
Cvelist	CVE-2024-20471	23 Oct 202417:47	–	cvelist
EUVD	EUVD-2024-18186	3 Oct 202520:07	–	euvd
NVD	CVE-2024-20471	23 Oct 202418:15	–	nvd
OSV	CVE-2024-20471	23 Oct 202418:15	–	osv
Positive Technologies	PT-2024-7476 · Cisco · Cisco Secure Firewall Management Center (Fmc)	23 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-20471	23 May 202507:49	–	redhatcve
Vulnrichment	CVE-2024-20471	23 Oct 202417:47	–	vulnrichment

Vulners

Node

cisco_systems cisco_secure_firewall_management_centerMatch06.02.2003

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.2

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.3

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.4

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.5

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.6

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.7

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.9

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.10

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.11

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.12

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.13

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.14

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.15

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.8

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.16

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.17

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.2.3.18

OR

cisco_systems cisco_secure_firewall_management_centerMatch06.04.2000

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.3

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.2

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.4

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.5

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.6

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.7

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.8

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.9

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.10

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.11

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.12

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.13

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.14

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.15

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.16

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.17

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.4.0.18

OR

cisco_systems cisco_secure_firewall_management_centerMatch06.06.2000

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.6.0.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch06.06.2001

OR

cisco_systems cisco_secure_firewall_management_centerMatch06.06.2003

OR

cisco_systems cisco_secure_firewall_management_centerMatch06.06.2004

OR

cisco_systems cisco_secure_firewall_management_centerMatch06.06.2005

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.6.5.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.6.5.2

OR

cisco_systems cisco_secure_firewall_management_centerMatch06.06.2007

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.6.7.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.6.7.2

OR

cisco_systems cisco_secure_firewall_management_centerMatch06.07.2000

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.7.0.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.7.0.2

OR

cisco_systems cisco_secure_firewall_management_centerMatch6.7.0.3

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.0.0

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.0.0.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.0.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.0.1.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.0.2

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.0.2.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.0.3

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.0.4

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.0.5

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.0.6

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.0.6.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.0.6.2

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.01.2000

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.1.0.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.1.0.2

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.1.0.3

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.02.2000

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.02.2001

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.02.2002

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.2.0.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.02.2003

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.2.3.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.02.2004

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.2.4.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.02.2005

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.2.5.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.02.2006

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.02.2007

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.2.5.2

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.02.2008

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.2.8.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.03.2000

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.03.2001

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.3.1.1

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.3.1.2

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.04.2000

OR

cisco_systems cisco_secure_firewall_management_centerMatch07.04.2001

OR

cisco_systems cisco_secure_firewall_management_centerMatch7.4.1.1

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inj-LOYAFcfq
web	www.web.nvd.nist.gov/view/vuln/detail

31 Oct 2024 00:00Current

6Medium risk

Vulners AI Score6

CVSS 36.5

CVSS 28.5

EPSS0.00322

cisco firewall management center sql injection web interface remote code execution network management software