Cisco Firepower Management Center Remote Command Execution

Exploit Title: Cisco Firepower Management Center Google Dork: non Date: 12/06/2023 Exploit Author: Abdualhadi khalifa Version: 6.2.3.18", "6.4.0.16", "6.6.7.1 CVE : CVE-2023-20048 import requests import json set the variables for the URL, username, and password for the FMC web services interface...

CVE-2023-20048

creationtimestamp| type| source ---|---|--- 2023-11-03 12:21:13+00:00| seen| https://t.me/truesecator/5046 2024-03-14 17:35:15+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10146 2025-09-22 21:00:04+00:00| published-proof-of-concept|...

CVE-2023-20048

A vulnerability in the web services interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute certain unauthorized configuration commands on a Firepower Threat Defense FTD device that is managed by the FMC Software. This vulnerability is...

CVE-2023-20048

CVE-2023-20048 describes a command-injection vulnerability in Cisco Firepower Management Center (FMC) web services. An authenticated attacker with FMC credentials can send crafted HTTP requests to an affected Firepower Threat Defense (FTD) device managed by FMC to execute unauthorized configurati...