VDB
BDU%3A2024-10813
BDU%3A2024-10813
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Уязвимость функции резервного копирования кластера системы управления программного обеспечения администрирования сети Cisco Secure Firewall Management Center (ранее Cisco Firepower Management Center), позволяющая нарушителю выполнить произвольные команды в базовой операционной системе
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Firepower Management Center | 7.3.1.2, 7.4.1.1, 7.2.5.2 |
| Cisco Systems Inc. | Cisco Firepower Management Center | |
| cisco | secure_firewall_management_center_software | 7.1.0 |
Timeline
- Oct 23, 2024 CVE Published
- Oct 23, 2024 PoC Published
- Dec 6, 2024 CVE Updated
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-g8AOKnDP advisory
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-M446vbEO url
- Cisco Event Response: October 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication url