CVE-2020-3307: Cisco Firepower Management Center Arbitrary Log File Write Vulnerability
First published: Wed May 06 2020(Updated: )
A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send incorrect information to the system log on the affected system.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Firewall Management Center | =6.2.2 | |
| Cisco Secure Firewall Management Center | =6.2.3 | |
| Cisco Secure Firewall Management Center | =6.3.0 | |
| Cisco Secure Firewall Management Center | =6.4.0 | |
| Cisco Secure Firewall Management Center | =6.5.0 | |
| Cisco Firepower Management Center Software | =6.2.2 | |
| Cisco Firepower Management Center Software | =6.2.3 | |
| Cisco Firepower Management Center Software | =6.3.0 | |
| Cisco Firepower Management Center Software | =6.4.0 | |
| Cisco Firepower Management Center Software | =6.5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-3307?
CVE-2020-3307 has a severity rating of high due to its potential for allowing unauthenticated access to log file manipulation.
How do I fix CVE-2020-3307?
To fix CVE-2020-3307, users should update their Cisco Firepower Management Center software to a patched version as recommended by Cisco.
Which versions of Cisco software are affected by CVE-2020-3307?
CVE-2020-3307 affects versions 6.2.2, 6.2.3, 6.3.0, 6.4.0, and 6.5.0 of Cisco Secure Firewall Management Center and Firepower Management Center.
Who can exploit CVE-2020-3307?
CVE-2020-3307 can be exploited by unauthenticated remote attackers who are able to send crafted requests to the affected systems.
What are the potential consequences of CVE-2020-3307?
Exploitation of CVE-2020-3307 may allow an attacker to write arbitrary entries to the log files, potentially enabling further attacks or information leaks.
- agent/type
- agent/weakness
- agent/severity
- agent/references
- agent/title
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/event
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco secure firewall management center
- version/cisco secure firewall management center/6.2.2
- version/cisco secure firewall management center/6.2.3
- version/cisco secure firewall management center/6.3.0
- version/cisco secure firewall management center/6.4.0
- version/cisco secure firewall management center/6.5.0
- canonical/cisco firepower management center software
- version/cisco firepower management center software/6.2.2
- version/cisco firepower management center software/6.2.3
- version/cisco firepower management center software/6.3.0
- version/cisco firepower management center software/6.4.0
- version/cisco firepower management center software/6.5.0