Lucene search
HistoryNov 15, 2022 - 9:15 p.m.
CVE-2022-20938
cisco
firepower management center
xml syntax
sensitive information
vulnerability
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
33.4%
A vulnerability in the module import function of the administrative interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to view sensitive information.
This vulnerability is due to insufficient validation of the XML syntax when importing a module. An attacker could exploit this vulnerability by supplying a specially crafted XML file to the function. A successful exploit could allow the attacker to read sensitive data that would normally not be revealed.
Affected configurations
Node
ciscofirepower_management_centerMatch6.1.0
ORciscofirepower_management_centerMatch6.1.0.1
ORciscofirepower_management_centerMatch6.1.0.2
ORciscofirepower_management_centerMatch6.1.0.3
ORciscofirepower_management_centerMatch6.1.0.4
ORciscofirepower_management_centerMatch6.1.0.5
ORciscofirepower_management_centerMatch6.1.0.6
ORciscofirepower_management_centerMatch6.1.0.7
ORciscofirepower_management_centerMatch6.2.0
ORciscofirepower_management_centerMatch6.2.0.1
ORciscofirepower_management_centerMatch6.2.0.2
ORciscofirepower_management_centerMatch6.2.0.3
ORciscofirepower_management_centerMatch6.2.0.4
ORciscofirepower_management_centerMatch6.2.0.5
ORciscofirepower_management_centerMatch6.2.0.6
ORciscofirepower_management_centerMatch6.2.1
ORciscofirepower_management_centerMatch6.2.2
ORciscofirepower_management_centerMatch6.2.2.1
ORciscofirepower_management_centerMatch6.2.2.2
ORciscofirepower_management_centerMatch6.2.2.3
ORciscofirepower_management_centerMatch6.2.2.4
ORciscofirepower_management_centerMatch6.2.2.5
ORciscofirepower_management_centerMatch6.2.3
ORciscofirepower_management_centerMatch6.2.3.1
ORciscofirepower_management_centerMatch6.2.3.2
ORciscofirepower_management_centerMatch6.2.3.3
ORciscofirepower_management_centerMatch6.2.3.4
ORciscofirepower_management_centerMatch6.2.3.5
ORciscofirepower_management_centerMatch6.2.3.6
ORciscofirepower_management_centerMatch6.2.3.7
ORciscofirepower_management_centerMatch6.2.3.8
ORciscofirepower_management_centerMatch6.2.3.9
ORciscofirepower_management_centerMatch6.2.3.10
ORciscofirepower_management_centerMatch6.2.3.11
ORciscofirepower_management_centerMatch6.2.3.12
ORciscofirepower_management_centerMatch6.2.3.13
ORciscofirepower_management_centerMatch6.2.3.14
ORciscofirepower_management_centerMatch6.2.3.15
ORciscofirepower_management_centerMatch6.2.3.16
ORciscofirepower_management_centerMatch6.2.3.17
ORciscofirepower_management_centerMatch6.2.3.18
ORciscofirepower_management_centerMatch6.3.0
ORciscofirepower_management_centerMatch6.3.0.1
ORciscofirepower_management_centerMatch6.3.0.2
ORciscofirepower_management_centerMatch6.3.0.3
ORciscofirepower_management_centerMatch6.3.0.4
ORciscofirepower_management_centerMatch6.3.0.5
ORciscofirepower_management_centerMatch6.4.0
ORciscofirepower_management_centerMatch6.4.0.1
ORciscofirepower_management_centerMatch6.4.0.2
ORciscofirepower_management_centerMatch6.4.0.3
ORciscofirepower_management_centerMatch6.4.0.4
ORciscofirepower_management_centerMatch6.4.0.5
ORciscofirepower_management_centerMatch6.4.0.6
ORciscofirepower_management_centerMatch6.4.0.7
ORciscofirepower_management_centerMatch6.4.0.8
ORciscofirepower_management_centerMatch6.4.0.9
ORciscofirepower_management_centerMatch6.4.0.10
ORciscofirepower_management_centerMatch6.4.0.11
ORciscofirepower_management_centerMatch6.4.0.12
ORciscofirepower_management_centerMatch6.4.0.13
ORciscofirepower_management_centerMatch6.4.0.14
ORciscofirepower_management_centerMatch6.4.0.15
ORciscofirepower_management_centerMatch6.5.0
ORciscofirepower_management_centerMatch6.5.0.1
ORciscofirepower_management_centerMatch6.5.0.2
ORciscofirepower_management_centerMatch6.5.0.3
ORciscofirepower_management_centerMatch6.5.0.4
ORciscofirepower_management_centerMatch6.5.0.5
ORciscofirepower_management_centerMatch6.6.0
ORciscofirepower_management_centerMatch6.6.0.1
ORciscofirepower_management_centerMatch6.6.1
ORciscofirepower_management_centerMatch6.6.3
ORciscofirepower_management_centerMatch6.6.4
ORciscofirepower_management_centerMatch6.6.5
ORciscofirepower_management_centerMatch6.6.5.1
ORciscofirepower_management_centerMatch6.6.5.2
ORciscofirepower_management_centerMatch6.7.0
ORciscofirepower_management_centerMatch6.7.0.1
ORciscofirepower_management_centerMatch6.7.0.2
ORciscofirepower_management_centerMatch6.7.0.3
ORciscofirepower_management_centerMatch7.0.0
ORciscofirepower_management_centerMatch7.0.0.1
ORciscofirepower_management_centerMatch7.0.1
ORciscofirepower_management_centerMatch7.0.1.1
ORciscofirepower_management_centerMatch7.0.2
ORciscofirepower_management_centerMatch7.0.2.1
ORciscofirepower_management_centerMatch7.0.3
ORciscofirepower_management_centerMatch7.0.4
ORciscofirepower_management_centerMatch7.1.0
ORciscofirepower_management_centerMatch7.1.0.1
ORciscofirepower_management_centerMatch7.1.0.2
Related
cve
cve
CVE-2022-20938
2022-11-15 21:15:34
cisco
cisco
prion
prion
Input validation
2022-11-15 21:15:00
cvelist
cvelist
CVE-2022-20938
2022-11-10 17:42:50
nessus
nessus
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
33.4%
Related for NVD:CVE-2022-20938