CVE-2019-16028: Cisco Firepower Management Center Lightweight Directory Access Protocol Authentication Bypass Vulnerability
First published: Wed Sep 23 2020(Updated: )
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper handling of Lightweight Directory Access Protocol (LDAP) authentication responses from an external authentication server. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to gain administrative access to the web-based management interface of the affected device.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Firewall Management Center | <6.2.3.16 | |
| Cisco Secure Firewall Management Center | >=6.3.0<6.3.0.6 | |
| Cisco Secure Firewall Management Center | >=6.4.0<6.4.0.7 | |
| Cisco Secure Firewall Management Center | >=6.5.0<6.5.0.2 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | <6.2.3.16 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | >=6.3.0<6.3.0.6 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | >=6.4.0<6.4.0.7 | |
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software | >=6.5.0<6.5.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-16028?
CVE-2019-16028 is rated as critical due to its potential for allowing unauthenticated remote attackers to gain administrative access.
How do I fix CVE-2019-16028?
To remediate CVE-2019-16028, update the affected Cisco Firepower Management Center software to a version that has addressed this vulnerability.
What impact can CVE-2019-16028 have on my network?
CVE-2019-16028 can lead to unauthorized access and control over devices managed by the affected Cisco software.
Which versions are affected by CVE-2019-16028?
CVE-2019-16028 affects Cisco Firepower Management Center versions up to 6.2.3.16, and versions 6.3.0 through 6.5.0.2.
Who is affected by CVE-2019-16028?
Organizations using affected versions of Cisco Firepower Management Center software are at risk of exploitation through CVE-2019-16028.
- agent/type
- agent/weakness
- agent/title
- agent/references
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco secure firewall management center
- version/cisco secure firewall management center/6.3.0
- version/cisco secure firewall management center/6.4.0
- version/cisco secure firewall management center/6.5.0
- canonical/cisco firepower management center (fmc) and firepower threat defense (ftd) software
- version/cisco firepower management center (fmc) and firepower threat defense (ftd) software/6.3.0
- version/cisco firepower management center (fmc) and firepower threat defense (ftd) software/6.4.0
- version/cisco firepower management center (fmc) and firepower threat defense (ftd) software/6.5.0