CVE-2020-3307: Cisco Firepower Management Center Arbitrary Log File Write Vulnerability
A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to send incorrect information to the system log on the affected system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3307?
CVE-2020-3307 has a severity rating of high due to its potential for allowing unauthenticated access to log file manipulation.
How do I fix CVE-2020-3307?
To fix CVE-2020-3307, users should update their Cisco Firepower Management Center software to a patched version as recommended by Cisco.
Which versions of Cisco software are affected by CVE-2020-3307?
CVE-2020-3307 affects versions 6.2.2, 6.2.3, 6.3.0, 6.4.0, and 6.5.0 of Cisco Secure Firewall Management Center and Firepower Management Center.
Who can exploit CVE-2020-3307?
CVE-2020-3307 can be exploited by unauthenticated remote attackers who are able to send crafted requests to the affected systems.
What are the potential consequences of CVE-2020-3307?
Exploitation of CVE-2020-3307 may allow an attacker to write arbitrary entries to the log files, potentially enabling further attacks or information leaks.