CVE-2024-20274

cisco secure firewall management center

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-20274

Katalog CVE

CVSS 5.5 · Medium EPSS 0,43%

Kerentanan Improper Input Validation pada cisco secure firewall management center. Skor CVSS 3.1 5.5 (Medium) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to inject arbitrary HTML content into a device-generated document. This vulnerability is due to improper validation of user-supplied data. An attacker could exploit this vulnerability by submitting malicious content to an affected device and using the device to generate a document that contains sensitive information. A successful exploit could allow the attacker to alter the standard layout of the device-generated documents, access arbitrary files from the underlying operating system, and conduct server-side request forgery (SSRF) attacks. To successfully exploit this vulnerability, an attacker would need valid credentials for a user account with policy-editing permissions, such as Network Admin, Intrusion Admin, or any custom user role with the same capabilities.

Rincian

Terbit di NVD
23 Oktober 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
5.5 (Medium), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-20: Improper Input Validation
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,43% peluang dieksploitasi; lebih tinggi dari 35,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco secure firewall management center Versi 6.2.3
cisco secure firewall management center Versi 6.2.3.1
cisco secure firewall management center Versi 6.2.3.2
cisco secure firewall management center Versi 6.2.3.3
cisco secure firewall management center Versi 6.2.3.4
cisco secure firewall management center Versi 6.2.3.5
cisco secure firewall management center Versi 6.2.3.6
cisco secure firewall management center Versi 6.2.3.7
cisco secure firewall management center Versi 6.2.3.8
cisco secure firewall management center Versi 6.2.3.9
cisco secure firewall management center Versi 6.2.3.10
cisco secure firewall management center Versi 6.2.3.11
cisco secure firewall management center Versi 6.2.3.12
cisco secure firewall management center Versi 6.2.3.13
cisco secure firewall management center Versi 6.2.3.14
cisco secure firewall management center Versi 6.2.3.15
cisco secure firewall management center Versi 6.2.3.16
cisco secure firewall management center Versi 6.2.3.17
cisco secure firewall management center Versi 6.2.3.18
cisco secure firewall management center Versi 6.4.0
cisco secure firewall management center Versi 6.4.0.1
cisco secure firewall management center Versi 6.4.0.2
cisco secure firewall management center Versi 6.4.0.3
cisco secure firewall management center Versi 6.4.0.4
cisco secure firewall management center Versi 6.4.0.5
cisco secure firewall management center Versi 6.4.0.6
cisco secure firewall management center Versi 6.4.0.7
cisco secure firewall management center Versi 6.4.0.8
cisco secure firewall management center Versi 6.4.0.9
cisco secure firewall management center Versi 6.4.0.10
cisco secure firewall management center Versi 6.4.0.11
cisco secure firewall management center Versi 6.4.0.12
cisco secure firewall management center Versi 6.4.0.13
cisco secure firewall management center Versi 6.4.0.14
cisco secure firewall management center Versi 6.4.0.15
cisco secure firewall management center Versi 6.4.0.16
cisco secure firewall management center Versi 6.4.0.17
cisco secure firewall management center Versi 6.4.0.18
cisco secure firewall management center Versi 6.6.0
cisco secure firewall management center Versi 6.6.0.1
cisco secure firewall management center Versi 6.6.1
cisco secure firewall management center Versi 6.6.3
cisco secure firewall management center Versi 6.6.4
cisco secure firewall management center Versi 6.6.5
cisco secure firewall management center Versi 6.6.5.1
cisco secure firewall management center Versi 6.6.5.2
cisco secure firewall management center Versi 6.6.7
cisco secure firewall management center Versi 6.6.7.1
cisco secure firewall management center Versi 6.6.7.2
cisco secure firewall management center Versi 6.7.0
cisco secure firewall management center Versi 6.7.0.1
cisco secure firewall management center Versi 6.7.0.2
cisco secure firewall management center Versi 6.7.0.3
cisco secure firewall management center Versi 7.0.0
cisco secure firewall management center Versi 7.0.0.1
cisco secure firewall management center Versi 7.0.1
cisco secure firewall management center Versi 7.0.1.1
cisco secure firewall management center Versi 7.0.2
cisco secure firewall management center Versi 7.0.2.1
cisco secure firewall management center Versi 7.0.3

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 86 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.