Lucene search
CiscoCISCO-SA-ALFO-THWFDMTEHistoryMay 06, 2020 - 4:00 p.m.
Cisco Firepower Management Center Arbitrary Log File Write Vulnerability
2020-05-0616:00:00
tools.cisco.com
12
0.001 Low
EPSS
Percentile
38.6%
A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device.
The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send incorrect information to the system log on the affected system.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-alfo-tHwFDmTE [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-alfo-tHwFDmTE”]
Affected configurations
Node
ciscofirepower_management_centerMatch5.4
ORciscofirepower_management_centerMatch6.0
ORciscofirepower_management_centerMatch5.3
ORciscofirepower_management_centerMatch6.1
ORciscofirepower_management_centerMatch5.2
ORciscofirepower_management_centerMatch4.10
ORciscofirepower_management_centerMatch2.9
ORciscofirepower_management_centerMatch6.2
ORciscofirepower_management_centerMatch6.3
ORciscofirepower_management_centerMatchany
ORciscofirepower_management_centerMatchany
ORciscofirepower_management_centerMatch5.4.1.3
ORciscofirepower_management_centerMatch5.4.1.5
ORciscofirepower_management_centerMatch5.4.1.4
ORciscofirepower_management_centerMatch5.4.1.2
ORciscofirepower_management_centerMatch5.4.1.1
ORciscofirepower_management_centerMatch5.4.1
ORciscofirepower_management_centerMatch5.4.0
ORciscofirepower_management_centerMatch5.4.0.2
ORciscofirepower_management_centerMatch5.4.1.6
ORciscofirepower_management_centerMatch5.4.1.9
ORciscofirepower_management_centerMatchany
ORciscofirepower_management_centerMatch6.0.0
ORciscofirepower_management_centerMatch6.0.1
ORciscofirepower_management_centerMatch6.0.0.1
ORciscofirepower_management_centerMatch6.0.0.0
ORciscofirepower_management_centerMatch6.0.1.1
ORciscofirepower_management_centerMatch6.0.1.3
ORciscofirepower_management_centerMatch6.0.1.2
ORciscofirepower_management_centerMatch6.0.1.4
ORciscofirepower_management_centerMatch5.3.0.2
ORciscofirepower_management_centerMatch5.3.1.6
ORciscofirepower_management_centerMatch5.3.1.5
ORciscofirepower_management_centerMatch5.3.1.4
ORciscofirepower_management_centerMatch5.3.1.3
ORciscofirepower_management_centerMatch5.3.0.3
ORciscofirepower_management_centerMatch5.3.0
ORciscofirepower_management_centerMatch5.3.1
ORciscofirepower_management_centerMatch5.3.0.4
ORciscofirepower_management_centerMatch5.3.1.7
ORciscofirepower_management_centerMatch6.1.0
ORciscofirepower_management_centerMatch6.1.0.2
ORciscofirepower_management_centerMatch6.1.0.1
ORciscofirepower_management_centerMatch6.1.0.3
ORciscofirepower_management_centerMatch6.1.0.4
ORciscofirepower_management_centerMatch6.1.0.5
ORciscofirepower_management_centerMatch6.1.0.6
ORciscofirepower_management_centerMatch6.1.0.7
ORciscofirepower_management_centerMatchany
ORciscofirepower_management_centerMatch5.2.0
ORciscofirepower_management_centerMatchany
ORciscofirepower_management_centerMatch4.10.3
ORciscofirepower_management_centerMatch4.10.3.9
ORciscofirepower_management_centerMatch2.9.0
ORciscofirepower_management_centerMatch2.9.7.10
ORciscofirepower_management_centerMatchany
ORciscofirepower_management_centerMatch6.2.0
ORciscofirepower_management_centerMatch6.2.1
ORciscofirepower_management_centerMatch6.2.2
ORciscofirepower_management_centerMatch6.2.0.2
ORciscofirepower_management_centerMatch6.2.0.1
ORciscofirepower_management_centerMatch6.2.0.3
ORciscofirepower_management_centerMatch6.2.0.4
ORciscofirepower_management_centerMatch6.2.0.5
ORciscofirepower_management_centerMatch6.2.0.6
ORciscofirepower_management_centerMatch6.2.0.7
ORciscofirepower_management_centerMatch6.2.2.1
ORciscofirepower_management_centerMatch6.2.2.2
ORciscofirepower_management_centerMatch6.2.2.3
ORciscofirepower_management_centerMatch6.2.2.4
ORciscofirepower_management_centerMatch6.2.3
ORciscofirepower_management_centerMatch6.2.3.1
ORciscofirepower_management_centerMatch6.2.3.2
ORciscofirepower_management_centerMatch6.2.3.3
ORciscofirepower_management_centerMatch6.2.3.4
ORciscofirepower_management_centerMatch6.2.3.5
ORciscofirepower_management_centerMatch6.2.3.6
ORciscofirepower_management_centerMatch6.2.3.7
ORciscofirepower_management_centerMatch6.2.3.9
ORciscofirepower_management_centerMatch6.2.3.10
ORciscofirepower_management_centerMatch6.2.3.11
ORciscofirepower_management_centerMatch6.2.3.12
ORciscofirepower_management_centerMatch6.2.3.13
ORciscofirepower_management_centerMatch6.2.3.14
ORciscofirepower_management_centerMatch6.3.0
ORciscofirepower_management_centerMatch6.3.0.1
ORciscofirepower_management_centerMatchany
Related
prion
prion
Input validation
2020-05-06 17:15:00
nvd
nvd
CVE-2020-3307
2020-05-06 17:15:13
nessus
nessus
cvelist
cvelist
cve
cve
CVE-2020-3307
2020-05-06 17:15:13