CVE-2019-12683: Cisco Firepower Management Center SQL Injection Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input validation. An attacker could exploit these vulnerabilities by sending crafted SQL queries to an affected device. A successful exploit could allow the attacker to view information that they are not authorized to view, make changes to the system that they are not authorized to make, and execute commands within the underlying operating system that may affect the availability of the device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-12683?
CVE-2019-12683 has a high severity rating due to the potential for remote attackers to execute arbitrary SQL injections.
How do I fix CVE-2019-12683?
To fix CVE-2019-12683, upgrade to the latest secure version of Cisco Firepower Management Center Software as advised by Cisco.
What impact does CVE-2019-12683 have on Cisco devices?
CVE-2019-12683 allows authenticated remote attackers to manipulate database queries, potentially compromising the integrity of the Cisco device.
Which Cisco products are affected by CVE-2019-12683?
Cisco Firepower Management Center versions 6.0.0, 6.1.0, 6.2.0, 6.2.2, and 6.2.3 are affected by CVE-2019-12683.
Is user authentication required to exploit CVE-2019-12683?
Yes, an attacker must be authenticated to exploit the vulnerabilities in CVE-2019-12683.