csirt@kutim:~/threat-intel/cve/CVE-2024-20374

Katalog CVE

CVSS 7.2 · High EPSS 0,79%

Kerentanan Improper Privilege Management pada cisco secure firewall management center. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary commands on the underlying operating system. This vulnerability is due to insufficient input validation of certain HTTP request parameters that are sent to the web-based management interface. An attacker could exploit this vulnerability by authenticating to the Cisco FMC web-based management interface and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute commands as the root user on the affected device. To exploit this vulnerability, an attacker would need Administrator-level credentials.

Rincian

Terbit di NVD
23 Oktober 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-269: Improper Privilege Management
EPSS (30 hari)
0,79% peluang dieksploitasi; lebih tinggi dari 55,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco secure firewall management center Versi 6.7.0
cisco secure firewall management center Versi 6.7.0.1
cisco secure firewall management center Versi 6.7.0.2
cisco secure firewall management center Versi 6.7.0.3
cisco secure firewall management center Versi 7.0.0
cisco secure firewall management center Versi 7.0.0.1
cisco secure firewall management center Versi 7.0.1
cisco secure firewall management center Versi 7.0.1.1
cisco secure firewall management center Versi 7.0.2
cisco secure firewall management center Versi 7.0.2.1
cisco secure firewall management center Versi 7.0.3
cisco secure firewall management center Versi 7.0.4
cisco secure firewall management center Versi 7.0.5
cisco secure firewall management center Versi 7.0.6
cisco secure firewall management center Versi 7.0.6.1
cisco secure firewall management center Versi 7.0.6.2
cisco secure firewall management center Versi 7.1.0
cisco secure firewall management center Versi 7.1.0.1
cisco secure firewall management center Versi 7.1.0.2
cisco secure firewall management center Versi 7.1.0.3
cisco secure firewall management center Versi 7.2.0
cisco secure firewall management center Versi 7.2.0.1
cisco secure firewall management center Versi 7.2.1
cisco secure firewall management center Versi 7.2.2
cisco secure firewall management center Versi 7.2.3
cisco secure firewall management center Versi 7.2.3.1
cisco secure firewall management center Versi 7.2.4
cisco secure firewall management center Versi 7.2.4.1
cisco secure firewall management center Versi 7.2.5
cisco secure firewall management center Versi 7.2.5.1
cisco secure firewall management center Versi 7.2.5.2
cisco secure firewall management center Versi 7.2.6
cisco secure firewall management center Versi 7.2.7
cisco secure firewall management center Versi 7.2.8
cisco secure firewall management center Versi 7.2.8.1
cisco secure firewall management center Versi 7.3.0
cisco secure firewall management center Versi 7.3.1
cisco secure firewall management center Versi 7.3.1.1
cisco secure firewall management center Versi 7.3.1.2
cisco secure firewall management center Versi 7.4.0
cisco secure firewall management center Versi 7.4.1
cisco secure firewall management center Versi 7.4.1.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.