CVE-2020-3301: Cisco Firepower Management Center Static Credential Vulnerabilities

Published May 6, 2020

Updated

Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account. For more information about these vulnerabilities, see the Details section of this advisory.

Affected Software

26 affected components

Cisco Secure Firewall Management Center=2.0.3

Cisco Secure Firewall Management Center=2.1.0

Cisco Secure Firewall Management Center=2.1.1

Cisco Secure Firewall Management Center=2.2.0

Cisco Secure Firewall Management Center=2.3.0

Cisco Secure Firewall Management Center=5.0.0

Cisco Secure Firewall Management Center=6.0.0

Cisco Secure Firewall Management Center=6.1.0

Cisco Secure Firewall Management Center=6.2.0

Cisco Secure Firewall Management Center=6.2.3

Cisco Secure Firewall Management Center=6.3.0

Cisco Secure Firewall Management Center=6.4.0

Cisco Secure Firewall Management Center=6.5.0

Cisco FirePOWER Management Center=2.0.3

Cisco FirePOWER Management Center=2.1.0

Cisco FirePOWER Management Center=2.1.1

Cisco FirePOWER Management Center=2.2.0

Cisco FirePOWER Management Center=2.3.0

Cisco FirePOWER Management Center=5.0.0

Cisco FirePOWER Management Center=6.0.0

Cisco FirePOWER Management Center=6.1.0

Cisco FirePOWER Management Center=6.2.0

Cisco FirePOWER Management Center=6.2.3

Cisco FirePOWER Management Center=6.3.0

Cisco FirePOWER Management Center=6.4.0

Cisco FirePOWER Management Center=6.5.0

Event History

May 6, 2020

CVE Published

via MITRE·04:42 PM

Data Sourced

via MITRE·04:42 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2020-3301?

CVE-2020-3301 is rated as a high-severity vulnerability with a critical impact on affected systems.

How do I fix CVE-2020-3301?

To fix CVE-2020-3301, it is recommended to update to the latest version of Cisco Firepower Management Center Software or Cisco Firepower User Agent Software.

Which Cisco products are affected by CVE-2020-3301?

CVE-2020-3301 affects multiple versions of Cisco Firepower Management Center Software and Cisco Firepower User Agent Software.

What type of vulnerabilities are involved in CVE-2020-3301?

CVE-2020-3301 involves multiple vulnerabilities that allow unauthorized access to sensitive parts of the system.

Can CVE-2020-3301 lead to unauthorized access?

Yes, CVE-2020-3301 can potentially allow an attacker to gain high-privileged access to an affected system.