8.8
CWE
352
Advisory Published
Updated

CVE-2018-0365: CSRF

First published: Thu Jun 21 2018(Updated: )

A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions on the targeted device via a web browser and with the privileges of the user. Cisco Bug IDs: CSCvb19750.

Credit: ykramarz@cisco.com ykramarz@cisco.com

Affected SoftwareAffected VersionHow to fix
Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software=6.0.1
Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software=6.1.0
Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software=6.2.0
Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software=6.2.1
Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software=6.2.2
Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software=6.2.3
Cisco Firepower Appliance=6.0.1
Cisco Firepower Appliance=6.1.0
Cisco Firepower Appliance=6.2.0
Cisco Firepower Appliance=6.2.1
Cisco Firepower Appliance=6.2.2
Cisco Firepower Appliance=6.2.3
Cisco Firepower appliance 8360 firmware
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firepower Management Center
Cisco Firepower appliance 8120 firmware=6.0.1
Cisco Firepower appliance 8120 firmware=6.1.0
Cisco Firepower appliance 8120 firmware=6.2.0
Cisco Firepower appliance 8120 firmware=6.2.1
Cisco Firepower appliance 8120 firmware=6.2.2
Cisco Firepower appliance 8120 firmware=6.2.3
Cisco Firepower appliance
Cisco Firepower appliance 8260 firmware=6.0.1
Cisco Firepower appliance 8260 firmware=6.1.0
Cisco Firepower appliance 8260 firmware=6.2.0
Cisco Firepower appliance 8260 firmware=6.2.1
Cisco Firepower appliance 8260 firmware=6.2.2
Cisco Firepower appliance 8260 firmware=6.2.3
Cisco Firepower appliance 8260 firmware
Cisco Firepower appliance=6.0.1
Cisco Firepower appliance=6.1.0
Cisco Firepower appliance=6.2.0
Cisco Firepower appliance=6.2.1
Cisco Firepower appliance=6.2.2
Cisco Firepower appliance=6.2.3
Cisco Firepower Appliance
Cisco Firepower 8130 Firmware=6.0.1
Cisco Firepower 8130 Firmware=6.1.0
Cisco Firepower 8130 Firmware=6.2.0
Cisco Firepower 8130 Firmware=6.2.1
Cisco Firepower 8130 Firmware=6.2.2
Cisco Firepower 8130 Firmware=6.2.3
Cisco Firepower appliance 8130
Cisco Firepower 8140=6.0.1
Cisco Firepower 8140=6.1.0
Cisco Firepower 8140=6.2.0
Cisco Firepower 8140=6.2.1
Cisco Firepower 8140=6.2.2
Cisco Firepower 8140=6.2.3
Cisco Firepower appliance
Cisco Firepower 8350=6.0.1
Cisco Firepower 8350=6.1.0
Cisco Firepower 8350=6.2.0
Cisco Firepower 8350=6.2.1
Cisco Firepower 8350=6.2.2
Cisco Firepower 8350=6.2.3
Cisco Firepower appliance 8350 firmware
Cisco AMP 8150=6.0.1
Cisco AMP 8150=6.1.0
Cisco AMP 8150=6.2.0
Cisco AMP 8150=6.2.1
Cisco AMP 8150=6.2.2
Cisco AMP 8150=6.2.3
Cisco AMP 8150
Cisco AMP 7150 Firmware=6.0.1
Cisco AMP 7150 Firmware=6.1.0
Cisco AMP 7150 Firmware=6.2.0
Cisco AMP 7150 Firmware=6.2.1
Cisco AMP 7150 Firmware=6.2.2
Cisco AMP 7150 Firmware=6.2.3
Cisco AMP 7150 Firmware
Cisco Firepower Appliance 8270 Firmware=6.0.1
Cisco Firepower Appliance 8270 Firmware=6.1.0
Cisco Firepower Appliance 8270 Firmware=6.2.0
Cisco Firepower Appliance 8270 Firmware=6.2.1
Cisco Firepower Appliance 8270 Firmware=6.2.2
Cisco Firepower Appliance 8270 Firmware=6.2.3
Cisco Firepower 8270
Cisco NGIPSv for VMware=6.0.1
Cisco NGIPSv for VMware=6.1.0
Cisco NGIPSv for VMware=6.2.0
Cisco NGIPSv for VMware=6.2.1
Cisco NGIPSv for VMware=6.2.2
Cisco NGIPSv for VMware=6.2.3
Cisco Firepower 8390 firmware=6.0.1
Cisco Firepower 8390 firmware=6.1.0
Cisco Firepower 8390 firmware=6.2.0
Cisco Firepower 8390 firmware=6.2.1
Cisco Firepower 8390 firmware=6.2.2
Cisco Firepower 8390 firmware=6.2.3
Cisco Firepower appliance
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firepower Management Center 4500-K9
Cisco Firepower appliance 8250=6.0.1
Cisco Firepower appliance 8250=6.1.0
Cisco Firepower appliance 8250=6.2.0
Cisco Firepower appliance 8250=6.2.1
Cisco Firepower appliance 8250=6.2.2
Cisco Firepower appliance 8250=6.2.3
Cisco Firepower 8250
Cisco Firesight Management Center 750=6.0.1
Cisco Firesight Management Center 750=6.1.0
Cisco Firesight Management Center 750=6.2.0
Cisco Firesight Management Center 750=6.2.1
Cisco Firesight Management Center 750=6.2.2
Cisco Firesight Management Center 750=6.2.3
Cisco Firepower Management Center
Cisco Firepower 8370 Firmware=6.0.1
Cisco Firepower 8370 Firmware=6.1.0
Cisco Firepower 8370 Firmware=6.2.0
Cisco Firepower 8370 Firmware=6.2.1
Cisco Firepower 8370 Firmware=6.2.2
Cisco Firepower 8370 Firmware=6.2.3
Cisco Firepower 8370 Firmware
Cisco Firepower 7120=6.0.1
Cisco Firepower 7120=6.1.0
Cisco Firepower 7120=6.2.0
Cisco Firepower 7120=6.2.1
Cisco Firepower 7120=6.2.2
Cisco Firepower 7120=6.2.3
Cisco Firepower 7120
Cisco Firepower 7010=6.0.1
Cisco Firepower 7010=6.1.0
Cisco Firepower 7010=6.2.0
Cisco Firepower 7010=6.2.1
Cisco Firepower 7010=6.2.2
Cisco Firepower 7010=6.2.3
Cisco Firepower 7010
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firepower Management Center 4000 firmware
Cisco Firepower 8290=6.0.1
Cisco Firepower 8290=6.1.0
Cisco Firepower 8290=6.2.0
Cisco Firepower 8290=6.2.1
Cisco Firepower 8290=6.2.2
Cisco Firepower 8290=6.2.3
Cisco Firepower appliance 8290 firmware
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firesight Management Center
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firepower Management Center 1000 firmware
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firepower Management Center
Cisco Firepower appliance 7125=6.0.1
Cisco Firepower appliance 7125=6.1.0
Cisco Firepower appliance 7125=6.2.0
Cisco Firepower appliance 7125=6.2.1
Cisco Firepower appliance 7125=6.2.2
Cisco Firepower appliance 7125=6.2.3
Cisco Firepower appliance
Cisco Firepower 7020=6.0.1
Cisco Firepower 7020=6.1.0
Cisco Firepower 7020=6.2.0
Cisco Firepower 7020=6.2.1
Cisco Firepower 7020=6.2.2
Cisco Firepower 7020=6.2.3
Cisco Firepower appliance
Cisco Firepower appliance 7030 firmware=6.0.1
Cisco Firepower appliance 7030 firmware=6.1.0
Cisco Firepower appliance 7030 firmware=6.2.0
Cisco Firepower appliance 7030 firmware=6.2.1
Cisco Firepower appliance 7030 firmware=6.2.2
Cisco Firepower appliance 7030 firmware=6.2.3
Cisco Firepower appliance
Cisco Firepower 7110=6.0.1
Cisco Firepower 7110=6.1.0
Cisco Firepower 7110=6.2.0
Cisco Firepower 7110=6.2.1
Cisco Firepower 7110=6.2.2
Cisco Firepower 7110=6.2.3
Cisco Firepower appliance 7110 firmware
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firepower Management Center 2000 firmware
Cisco Firepower Management Center virtual appliance firmware=6.0.1
Cisco Firepower Management Center virtual appliance firmware=6.1.0
Cisco Firepower Management Center virtual appliance firmware=6.2.0
Cisco Firepower Management Center virtual appliance firmware=6.2.1
Cisco Firepower Management Center virtual appliance firmware=6.2.2
Cisco Firepower Management Center virtual appliance firmware=6.2.3
Cisco Firepower 7115=6.0.1
Cisco Firepower 7115=6.1.0
Cisco Firepower 7115=6.2.0
Cisco Firepower 7115=6.2.1
Cisco Firepower 7115=6.2.2
Cisco Firepower 7115=6.2.3
Cisco Firepower 7115
Cisco Secure Firewall Management Center=6.0.1
Cisco Secure Firewall Management Center=6.1.0
Cisco Secure Firewall Management Center=6.2.0
Cisco Secure Firewall Management Center=6.2.1
Cisco Secure Firewall Management Center=6.2.2
Cisco Secure Firewall Management Center=6.2.3
All of
Any of
Cisco Firepower Appliance=6.0.1
Cisco Firepower Appliance=6.1.0
Cisco Firepower Appliance=6.2.0
Cisco Firepower Appliance=6.2.1
Cisco Firepower Appliance=6.2.2
Cisco Firepower Appliance=6.2.3
Cisco Firepower appliance 8360 firmware
All of
Any of
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firepower Management Center
All of
Any of
Cisco Firepower appliance 8120 firmware=6.0.1
Cisco Firepower appliance 8120 firmware=6.1.0
Cisco Firepower appliance 8120 firmware=6.2.0
Cisco Firepower appliance 8120 firmware=6.2.1
Cisco Firepower appliance 8120 firmware=6.2.2
Cisco Firepower appliance 8120 firmware=6.2.3
Cisco Firepower appliance
All of
Any of
Cisco Firepower appliance 8260 firmware=6.0.1
Cisco Firepower appliance 8260 firmware=6.1.0
Cisco Firepower appliance 8260 firmware=6.2.0
Cisco Firepower appliance 8260 firmware=6.2.1
Cisco Firepower appliance 8260 firmware=6.2.2
Cisco Firepower appliance 8260 firmware=6.2.3
Cisco Firepower appliance 8260 firmware
All of
Any of
Cisco Firepower appliance=6.0.1
Cisco Firepower appliance=6.1.0
Cisco Firepower appliance=6.2.0
Cisco Firepower appliance=6.2.1
Cisco Firepower appliance=6.2.2
Cisco Firepower appliance=6.2.3
Cisco Firepower Appliance
All of
Any of
Cisco Firepower 8130 Firmware=6.0.1
Cisco Firepower 8130 Firmware=6.1.0
Cisco Firepower 8130 Firmware=6.2.0
Cisco Firepower 8130 Firmware=6.2.1
Cisco Firepower 8130 Firmware=6.2.2
Cisco Firepower 8130 Firmware=6.2.3
Cisco Firepower appliance 8130
All of
Any of
Cisco Firepower 8140=6.0.1
Cisco Firepower 8140=6.1.0
Cisco Firepower 8140=6.2.0
Cisco Firepower 8140=6.2.1
Cisco Firepower 8140=6.2.2
Cisco Firepower 8140=6.2.3
Cisco Firepower appliance
All of
Any of
Cisco Firepower 8350=6.0.1
Cisco Firepower 8350=6.1.0
Cisco Firepower 8350=6.2.0
Cisco Firepower 8350=6.2.1
Cisco Firepower 8350=6.2.2
Cisco Firepower 8350=6.2.3
Cisco Firepower appliance 8350 firmware
All of
Any of
Cisco AMP 8150=6.0.1
Cisco AMP 8150=6.1.0
Cisco AMP 8150=6.2.0
Cisco AMP 8150=6.2.1
Cisco AMP 8150=6.2.2
Cisco AMP 8150=6.2.3
Cisco AMP 8150
All of
Any of
Cisco AMP 7150 Firmware=6.0.1
Cisco AMP 7150 Firmware=6.1.0
Cisco AMP 7150 Firmware=6.2.0
Cisco AMP 7150 Firmware=6.2.1
Cisco AMP 7150 Firmware=6.2.2
Cisco AMP 7150 Firmware=6.2.3
Cisco AMP 7150 Firmware
All of
Any of
Cisco Firepower Appliance 8270 Firmware=6.0.1
Cisco Firepower Appliance 8270 Firmware=6.1.0
Cisco Firepower Appliance 8270 Firmware=6.2.0
Cisco Firepower Appliance 8270 Firmware=6.2.1
Cisco Firepower Appliance 8270 Firmware=6.2.2
Cisco Firepower Appliance 8270 Firmware=6.2.3
Cisco Firepower 8270
All of
Any of
Cisco Firepower 8390 firmware=6.0.1
Cisco Firepower 8390 firmware=6.1.0
Cisco Firepower 8390 firmware=6.2.0
Cisco Firepower 8390 firmware=6.2.1
Cisco Firepower 8390 firmware=6.2.2
Cisco Firepower 8390 firmware=6.2.3
Cisco Firepower appliance
All of
Any of
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firepower Management Center 4500-K9
All of
Any of
Cisco Firepower appliance 8250=6.0.1
Cisco Firepower appliance 8250=6.1.0
Cisco Firepower appliance 8250=6.2.0
Cisco Firepower appliance 8250=6.2.1
Cisco Firepower appliance 8250=6.2.2
Cisco Firepower appliance 8250=6.2.3
Cisco Firepower 8250
All of
Any of
Cisco Firesight Management Center 750=6.0.1
Cisco Firesight Management Center 750=6.1.0
Cisco Firesight Management Center 750=6.2.0
Cisco Firesight Management Center 750=6.2.1
Cisco Firesight Management Center 750=6.2.2
Cisco Firesight Management Center 750=6.2.3
Cisco Firepower Management Center
All of
Any of
Cisco Firepower 8370 Firmware=6.0.1
Cisco Firepower 8370 Firmware=6.1.0
Cisco Firepower 8370 Firmware=6.2.0
Cisco Firepower 8370 Firmware=6.2.1
Cisco Firepower 8370 Firmware=6.2.2
Cisco Firepower 8370 Firmware=6.2.3
Cisco Firepower 8370 Firmware
All of
Any of
Cisco Firepower 7120=6.0.1
Cisco Firepower 7120=6.1.0
Cisco Firepower 7120=6.2.0
Cisco Firepower 7120=6.2.1
Cisco Firepower 7120=6.2.2
Cisco Firepower 7120=6.2.3
Cisco Firepower 7120
All of
Any of
Cisco Firepower 7010=6.0.1
Cisco Firepower 7010=6.1.0
Cisco Firepower 7010=6.2.0
Cisco Firepower 7010=6.2.1
Cisco Firepower 7010=6.2.2
Cisco Firepower 7010=6.2.3
Cisco Firepower 7010
All of
Any of
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firepower Management Center 4000 firmware
All of
Any of
Cisco Firepower 8290=6.0.1
Cisco Firepower 8290=6.1.0
Cisco Firepower 8290=6.2.0
Cisco Firepower 8290=6.2.1
Cisco Firepower 8290=6.2.2
Cisco Firepower 8290=6.2.3
Cisco Firepower appliance 8290 firmware
All of
Any of
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firesight Management Center
All of
Any of
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firepower Management Center 1000 firmware
All of
Any of
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firepower Management Center
All of
Any of
Cisco Firepower appliance 7125=6.0.1
Cisco Firepower appliance 7125=6.1.0
Cisco Firepower appliance 7125=6.2.0
Cisco Firepower appliance 7125=6.2.1
Cisco Firepower appliance 7125=6.2.2
Cisco Firepower appliance 7125=6.2.3
Cisco Firepower appliance
All of
Any of
Cisco Firepower 7020=6.0.1
Cisco Firepower 7020=6.1.0
Cisco Firepower 7020=6.2.0
Cisco Firepower 7020=6.2.1
Cisco Firepower 7020=6.2.2
Cisco Firepower 7020=6.2.3
Cisco Firepower appliance
All of
Any of
Cisco Firepower appliance 7030 firmware=6.0.1
Cisco Firepower appliance 7030 firmware=6.1.0
Cisco Firepower appliance 7030 firmware=6.2.0
Cisco Firepower appliance 7030 firmware=6.2.1
Cisco Firepower appliance 7030 firmware=6.2.2
Cisco Firepower appliance 7030 firmware=6.2.3
Cisco Firepower appliance
All of
Any of
Cisco Firepower 7110=6.0.1
Cisco Firepower 7110=6.1.0
Cisco Firepower 7110=6.2.0
Cisco Firepower 7110=6.2.1
Cisco Firepower 7110=6.2.2
Cisco Firepower 7110=6.2.3
Cisco Firepower appliance 7110 firmware
All of
Any of
Cisco Firepower Management Center=6.0.1
Cisco Firepower Management Center=6.1.0
Cisco Firepower Management Center=6.2.0
Cisco Firepower Management Center=6.2.1
Cisco Firepower Management Center=6.2.2
Cisco Firepower Management Center=6.2.3
Cisco Firepower Management Center 2000 firmware
All of
Any of
Cisco Firepower 7115=6.0.1
Cisco Firepower 7115=6.1.0
Cisco Firepower 7115=6.2.0
Cisco Firepower 7115=6.2.1
Cisco Firepower 7115=6.2.2
Cisco Firepower 7115=6.2.3
Cisco Firepower 7115

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2018-0365?

    CVE-2018-0365 is rated as a high severity vulnerability due to the potential for unauthorized actions via cross-site request forgery (CSRF) attacks.

  • How do I fix CVE-2018-0365?

    To remediate CVE-2018-0365, apply the latest patches provided by Cisco for your affected Firepower Management Center versions.

  • Which Cisco products are affected by CVE-2018-0365?

    CVE-2018-0365 affects multiple versions of Cisco Firepower Management Center, specifically versions 6.0.1 up to 6.2.3.

  • Can CVE-2018-0365 be exploited remotely?

    Yes, CVE-2018-0365 can be exploited by an unauthenticated remote attacker.

  • What actions can be taken by an attacker exploiting CVE-2018-0365?

    An attacker exploiting CVE-2018-0365 can perform arbitrary actions on the affected device without authentication.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203