Lucene search

CiscoVULNRICHMENT:CVE-2024-20360

HistoryMay 22, 2024 - 5:46 p.m.

CVE-2024-20360

2024-05-2217:46:25

cisco

github.com

cisco firepower management center

sql injection

remote attacker

user input validation

database vulnerability

operating system command execution

privilege escalation

read only user

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based management interface does not adequately validate user input. An attacker could exploit this vulnerability by authenticating to the application and sending crafted SQL queries to an affected system. A successful exploit could allow the attacker to obtain any data from the database, execute arbitrary commands on the underlying operating system, and elevate privileges to root. To exploit this vulnerability, an attacker would need at least Read Only user credentials.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:cisco:firepower_management_center:-:*:*:*:*:*:*:*"
    ],
    "vendor": "cisco",
    "product": "firepower_management_center",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.0"
      },
      {
        "status": "affected",
        "version": "7.0.0.1"
      },
      {
        "status": "affected",
        "version": "7.0.1"
      },
      {
        "status": "affected",
        "version": "7.0.1.1"
      },
      {
        "status": "affected",
        "version": "7.0.2"
      },
      {
        "status": "affected",
        "version": "7.0.2.1"
      },
      {
        "status": "affected",
        "version": "7.0.3"
      },
      {
        "status": "affected",
        "version": "7.0.4"
      },
      {
        "status": "affected",
        "version": "7.0.5"
      },
      {
        "status": "affected",
        "version": "7.0.6"
      },
      {
        "status": "affected",
        "version": "7.1.0"
      },
      {
        "status": "affected",
        "version": "7.1.0.1"
      },
      {
        "status": "affected",
        "version": "7.1.0.2"
      },
      {
        "status": "affected",
        "version": "7.1.0.3"
      },
      {
        "status": "affected",
        "version": "7.2.0"
      },
      {
        "status": "affected",
        "version": "7.2.1"
      },
      {
        "status": "affected",
        "version": "7.2.2"
      },
      {
        "status": "affected",
        "version": "7.2.0.1"
      },
      {
        "status": "affected",
        "version": "7.2.3"
      },
      {
        "status": "affected",
        "version": "7.2.3.1"
      },
      {
        "status": "affected",
        "version": "7.2.4"
      },
      {
        "status": "affected",
        "version": "7.2.4.1"
      },
      {
        "status": "affected",
        "version": "7.2.5"
      },
      {
        "status": "affected",
        "version": "7.3.0"
      },
      {
        "status": "affected",
        "version": "7.3.1"
      },
      {
        "status": "affected",
        "version": "7.3.1.1"
      },
      {
        "status": "affected",
        "version": "7.3.1.2"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sqli-WFFDnNOs

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2024-20360