Lucene search

CiscoCISCO-SA-FMCAI-Z5DQOBVN

HistoryMay 06, 2020 - 4:00 p.m.

Cisco Firepower Management Center File Overwrite Vulnerability

2020-05-0616:00:00

tools.cisco.com

EPSS

0.001

Percentile

44.9%

JSON

A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to overwrite files on the file system of an affected device.

The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by uploading a crafted file to the web UI on an affected device. A successful exploit could allow the attacker to overwrite files on the file system of the affected device.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmcai-z5dQObVN [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmcai-z5dQObVN”]

Affected configurations

Vulners

Node

ciscofirepower_management_centerMatch5.4

ciscofirepower_management_centerMatch6.0

ciscofirepower_management_centerMatch5.3

ciscofirepower_management_centerMatch6.1

ciscofirepower_management_centerMatch5.2

ciscofirepower_management_centerMatch4.10

ciscofirepower_management_centerMatch2.9

ciscofirepower_management_centerMatch6.2

ciscofirepower_management_centerMatchany

ciscocisco_firepower_management_center_baseMatchany

ciscofirepower_management_centerMatch5.4.1.3

ciscofirepower_management_centerMatch5.4.1.5

ciscofirepower_management_centerMatch5.4.1.4

ciscofirepower_management_centerMatch5.4.1.2

ciscofirepower_management_centerMatch5.4.1.1

ciscofirepower_management_centerMatch5.4.1

ciscofirepower_management_centerMatch5.4.0

ciscofirepower_management_centerMatch5.4.0.2

ciscofirepower_management_centerMatch5.4.1.6

ciscofirepower_management_centerMatch5.4.1.9

ciscocisco_firepower_management_center_baseMatchany

ciscofirepower_management_centerMatch6.0.0

ciscofirepower_management_centerMatch6.0.1

ciscofirepower_management_centerMatch6.0.0.1

ciscofirepower_management_centerMatch6.0.0.0

ciscofirepower_management_centerMatch6.0.1.1

ciscofirepower_management_centerMatch6.0.1.3

ciscofirepower_management_centerMatch6.0.1.2

ciscofirepower_management_centerMatch6.0.1.4

ciscofirepower_management_centerMatch5.3.0.2

ciscofirepower_management_centerMatch5.3.1.6

ciscofirepower_management_centerMatch5.3.1.5

ciscofirepower_management_centerMatch5.3.1.4

ciscofirepower_management_centerMatch5.3.1.3

ciscofirepower_management_centerMatch5.3.0.3

ciscofirepower_management_centerMatch5.3.0

ciscofirepower_management_centerMatch5.3.1

ciscofirepower_management_centerMatch5.3.0.4

ciscofirepower_management_centerMatch5.3.1.7

ciscofirepower_management_centerMatch6.1.0

ciscofirepower_management_centerMatch6.1.0.2

ciscofirepower_management_centerMatch6.1.0.1

ciscofirepower_management_centerMatch6.1.0.3

ciscofirepower_management_centerMatch6.1.0.4

ciscofirepower_management_centerMatch6.1.0.5

ciscofirepower_management_centerMatch6.1.0.6

ciscofirepower_management_centerMatch6.1.0.7

ciscocisco_firepower_management_center_baseMatchany

ciscofirepower_management_centerMatch5.2.0

ciscocisco_firepower_management_center_baseMatchany

ciscofirepower_management_centerMatch4.10.3

ciscofirepower_management_centerMatch4.10.3.9

ciscofirepower_management_centerMatch2.9.0

ciscofirepower_management_centerMatch2.9.7.10

ciscocisco_firepower_management_center_baseMatchany

ciscofirepower_management_centerMatch6.2.0

ciscofirepower_management_centerMatch6.2.1

ciscofirepower_management_centerMatch6.2.2

ciscofirepower_management_centerMatch6.2.0.2

ciscofirepower_management_centerMatch6.2.0.1

ciscofirepower_management_centerMatch6.2.0.3

ciscofirepower_management_centerMatch6.2.0.4

ciscofirepower_management_centerMatch6.2.0.5

ciscofirepower_management_centerMatch6.2.0.6

ciscofirepower_management_centerMatch6.2.0.7

ciscofirepower_management_centerMatch6.2.2.1

ciscofirepower_management_centerMatchany

VendorProductVersionCPE
ciscofirepower_management_center5.4cpe:2.3:a:cisco:firepower_management_center:5.4:*:*:*:*:*:*:*
ciscofirepower_management_center6.0cpe:2.3:a:cisco:firepower_management_center:6.0:*:*:*:*:*:*:*
ciscofirepower_management_center5.3cpe:2.3:a:cisco:firepower_management_center:5.3:*:*:*:*:*:*:*
ciscofirepower_management_center6.1cpe:2.3:a:cisco:firepower_management_center:6.1:*:*:*:*:*:*:*
ciscofirepower_management_center5.2cpe:2.3:a:cisco:firepower_management_center:5.2:*:*:*:*:*:*:*
ciscofirepower_management_center4.10cpe:2.3:a:cisco:firepower_management_center:4.10:*:*:*:*:*:*:*
ciscofirepower_management_center2.9cpe:2.3:a:cisco:firepower_management_center:2.9:*:*:*:*:*:*:*
ciscofirepower_management_center6.2cpe:2.3:a:cisco:firepower_management_center:6.2:*:*:*:*:*:*:*
ciscofirepower_management_centeranycpe:2.3:a:cisco:firepower_management_center:any:*:*:*:*:*:*:*
ciscocisco_firepower_management_center_baseanycpe:2.3:a:cisco:cisco_firepower_management_center_base:any:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	firepower_management_center	5.4	cpe:2.3:a:cisco:firepower_management_center:5.4:::::::*
cisco	firepower_management_center	6.0	cpe:2.3:a:cisco:firepower_management_center:6.0:::::::*
cisco	firepower_management_center	5.3	cpe:2.3:a:cisco:firepower_management_center:5.3:::::::*
cisco	firepower_management_center	6.1	cpe:2.3:a:cisco:firepower_management_center:6.1:::::::*
cisco	firepower_management_center	5.2	cpe:2.3:a:cisco:firepower_management_center:5.2:::::::*
cisco	firepower_management_center	4.10	cpe:2.3:a:cisco:firepower_management_center:4.10:::::::*
cisco	firepower_management_center	2.9	cpe:2.3:a:cisco:firepower_management_center:2.9:::::::*
cisco	firepower_management_center	6.2	cpe:2.3:a:cisco:firepower_management_center:6.2:::::::*
cisco	firepower_management_center	any	cpe:2.3:a:cisco:firepower_management_center:any:::::::*
cisco	cisco_firepower_management_center_base	any	cpe:2.3:a:cisco:cisco_firepower_management_center_base:any:::::::*