Lucene search

CiscoCISCO-SA-ALFO-THWFDMTE

HistoryMay 06, 2020 - 4:00 p.m.

Cisco Firepower Management Center Arbitrary Log File Write Vulnerability

2020-05-0616:00:00

tools.cisco.com

EPSS

0.001

Percentile

38.6%

JSON

A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device.

The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send incorrect information to the system log on the affected system.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-alfo-tHwFDmTE [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-alfo-tHwFDmTE”]

Affected configurations

Vulners

Node

ciscofirepower_management_centerMatch5.4

ciscofirepower_management_centerMatch6.0

ciscofirepower_management_centerMatch5.3

ciscofirepower_management_centerMatch6.1

ciscofirepower_management_centerMatch5.2

ciscofirepower_management_centerMatch4.10

ciscofirepower_management_centerMatch2.9

ciscofirepower_management_centerMatch6.2

ciscofirepower_management_centerMatch6.3

ciscofirepower_management_centerMatchany

ciscocisco_firepower_management_center_baseMatchany

ciscofirepower_management_centerMatch5.4.1.3

ciscofirepower_management_centerMatch5.4.1.5

ciscofirepower_management_centerMatch5.4.1.4

ciscofirepower_management_centerMatch5.4.1.2

ciscofirepower_management_centerMatch5.4.1.1

ciscofirepower_management_centerMatch5.4.1

ciscofirepower_management_centerMatch5.4.0

ciscofirepower_management_centerMatch5.4.0.2

ciscofirepower_management_centerMatch5.4.1.6

ciscofirepower_management_centerMatch5.4.1.9

ciscocisco_firepower_management_center_baseMatchany

ciscofirepower_management_centerMatch6.0.0

ciscofirepower_management_centerMatch6.0.1

ciscofirepower_management_centerMatch6.0.0.1

ciscofirepower_management_centerMatch6.0.0.0

ciscofirepower_management_centerMatch6.0.1.1

ciscofirepower_management_centerMatch6.0.1.3

ciscofirepower_management_centerMatch6.0.1.2

ciscofirepower_management_centerMatch6.0.1.4

ciscofirepower_management_centerMatch5.3.0.2

ciscofirepower_management_centerMatch5.3.1.6

ciscofirepower_management_centerMatch5.3.1.5

ciscofirepower_management_centerMatch5.3.1.4

ciscofirepower_management_centerMatch5.3.1.3

ciscofirepower_management_centerMatch5.3.0.3

ciscofirepower_management_centerMatch5.3.0

ciscofirepower_management_centerMatch5.3.1

ciscofirepower_management_centerMatch5.3.0.4

ciscofirepower_management_centerMatch5.3.1.7

ciscofirepower_management_centerMatch6.1.0

ciscofirepower_management_centerMatch6.1.0.2

ciscofirepower_management_centerMatch6.1.0.1

ciscofirepower_management_centerMatch6.1.0.3

ciscofirepower_management_centerMatch6.1.0.4

ciscofirepower_management_centerMatch6.1.0.5

ciscofirepower_management_centerMatch6.1.0.6

ciscofirepower_management_centerMatch6.1.0.7

ciscocisco_firepower_management_center_baseMatchany

ciscofirepower_management_centerMatch5.2.0

ciscocisco_firepower_management_center_baseMatchany

ciscofirepower_management_centerMatch4.10.3

ciscofirepower_management_centerMatch4.10.3.9

ciscofirepower_management_centerMatch2.9.0

ciscofirepower_management_centerMatch2.9.7.10

ciscocisco_firepower_management_center_baseMatchany

ciscofirepower_management_centerMatch6.2.0

ciscofirepower_management_centerMatch6.2.1

ciscofirepower_management_centerMatch6.2.2

ciscofirepower_management_centerMatch6.2.0.2

ciscofirepower_management_centerMatch6.2.0.1

ciscofirepower_management_centerMatch6.2.0.3

ciscofirepower_management_centerMatch6.2.0.4

ciscofirepower_management_centerMatch6.2.0.5

ciscofirepower_management_centerMatch6.2.0.6

ciscofirepower_management_centerMatch6.2.0.7

ciscofirepower_management_centerMatch6.2.2.1

ciscofirepower_management_centerMatch6.2.2.2

ciscofirepower_management_centerMatch6.2.2.3

ciscofirepower_management_centerMatch6.2.2.4

ciscofirepower_management_centerMatch6.2.3

ciscofirepower_management_centerMatch6.2.3.1

ciscofirepower_management_centerMatch6.2.3.2

ciscofirepower_management_centerMatch6.2.3.3

ciscofirepower_management_centerMatch6.2.3.4

ciscofirepower_management_centerMatch6.2.3.5

ciscofirepower_management_centerMatch6.2.3.6

ciscofirepower_management_centerMatch6.2.3.7

ciscofirepower_management_centerMatch6.2.3.9

ciscofirepower_management_centerMatch6.2.3.10

ciscofirepower_management_centerMatch6.2.3.11

ciscofirepower_management_centerMatch6.2.3.12

ciscofirepower_management_centerMatch6.2.3.13

ciscofirepower_management_centerMatch6.2.3.14

ciscofirepower_management_centerMatch6.3.0

ciscofirepower_management_centerMatch6.3.0.1

ciscofirepower_management_centerMatchany

VendorProductVersionCPE
ciscofirepower_management_center5.4cpe:2.3:a:cisco:firepower_management_center:5.4:*:*:*:*:*:*:*
ciscofirepower_management_center6.0cpe:2.3:a:cisco:firepower_management_center:6.0:*:*:*:*:*:*:*
ciscofirepower_management_center5.3cpe:2.3:a:cisco:firepower_management_center:5.3:*:*:*:*:*:*:*
ciscofirepower_management_center6.1cpe:2.3:a:cisco:firepower_management_center:6.1:*:*:*:*:*:*:*
ciscofirepower_management_center5.2cpe:2.3:a:cisco:firepower_management_center:5.2:*:*:*:*:*:*:*
ciscofirepower_management_center4.10cpe:2.3:a:cisco:firepower_management_center:4.10:*:*:*:*:*:*:*
ciscofirepower_management_center2.9cpe:2.3:a:cisco:firepower_management_center:2.9:*:*:*:*:*:*:*
ciscofirepower_management_center6.2cpe:2.3:a:cisco:firepower_management_center:6.2:*:*:*:*:*:*:*
ciscofirepower_management_center6.3cpe:2.3:a:cisco:firepower_management_center:6.3:*:*:*:*:*:*:*
ciscofirepower_management_centeranycpe:2.3:a:cisco:firepower_management_center:any:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	firepower_management_center	5.4	cpe:2.3:a:cisco:firepower_management_center:5.4:::::::*
cisco	firepower_management_center	6.0	cpe:2.3:a:cisco:firepower_management_center:6.0:::::::*
cisco	firepower_management_center	5.3	cpe:2.3:a:cisco:firepower_management_center:5.3:::::::*
cisco	firepower_management_center	6.1	cpe:2.3:a:cisco:firepower_management_center:6.1:::::::*
cisco	firepower_management_center	5.2	cpe:2.3:a:cisco:firepower_management_center:5.2:::::::*
cisco	firepower_management_center	4.10	cpe:2.3:a:cisco:firepower_management_center:4.10:::::::*
cisco	firepower_management_center	2.9	cpe:2.3:a:cisco:firepower_management_center:2.9:::::::*
cisco	firepower_management_center	6.2	cpe:2.3:a:cisco:firepower_management_center:6.2:::::::*
cisco	firepower_management_center	6.3	cpe:2.3:a:cisco:firepower_management_center:6.3:::::::*
cisco	firepower_management_center	any	cpe:2.3:a:cisco:firepower_management_center:any:::::::*