CVE-2020-3410: Cisco Firepower Management Center Software Common Access Card Authentication Bypass Vulnerability
A vulnerability in the Common Access Card (CAC) authentication feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and access the FMC system. The attacker must have a valid CAC to initiate the access attempt. The vulnerability is due to incorrect session invalidation during CAC authentication. An attacker could exploit this vulnerability by performing a CAC-based authentication attempt to an affected system. A successful exploit could allow the attacker to access an affected system with the privileges of a CAC-authenticated user who is currently logged in.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-3410?
CVE-2020-3410 has been rated as high severity due to its potential to allow unauthenticated access to the Cisco Firepower Management Center.
How do I fix CVE-2020-3410?
To address CVE-2020-3410, you should update the Cisco Firepower Management Center Software to the patched versions provided by Cisco.
Which versions are affected by CVE-2020-3410?
CVE-2020-3410 affects Cisco Secure Firewall Management Center version 6.6.0 and 6.6.0.1, as well as Cisco Firepower Management Center Software version 6.6.0 and 6.6.0.1.
Can CVE-2020-3410 be exploited remotely?
Yes, CVE-2020-3410 can be exploited by an unauthenticated, remote attacker who has a valid Common Access Card.
Is there a workaround for CVE-2020-3410?
There are no specific workarounds for CVE-2020-3410; the recommended mitigation is to apply the available updates.