CVE-2022-20941
First published: Thu Nov 10 2022(Updated: )
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due to missing authorization for certain resources in the web-based management interface together with insufficient entropy in these resource names. An attacker could exploit this vulnerability by sending a series of HTTPS requests to an affected device to enumerate resources on the device. A successful exploit could allow the attacker to retrieve sensitive information from the device.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower Management Center Software | =6.1.0 | |
| Cisco Firepower Management Center Software | =6.1.0.1 | |
| Cisco Firepower Management Center Software | =6.1.0.2 | |
| Cisco Firepower Management Center Software | =6.1.0.3 | |
| Cisco Firepower Management Center Software | =6.1.0.4 | |
| Cisco Firepower Management Center Software | =6.1.0.5 | |
| Cisco Firepower Management Center Software | =6.1.0.6 | |
| Cisco Firepower Management Center Software | =6.1.0.7 | |
| Cisco Firepower Management Center Software | =6.2.0 | |
| Cisco Firepower Management Center Software | =6.2.0.1 | |
| Cisco Firepower Management Center Software | =6.2.0.2 | |
| Cisco Firepower Management Center Software | =6.2.0.3 | |
| Cisco Firepower Management Center Software | =6.2.0.4 | |
| Cisco Firepower Management Center Software | =6.2.0.5 | |
| Cisco Firepower Management Center Software | =6.2.0.6 | |
| Cisco Firepower Management Center Software | =6.2.1 | |
| Cisco Firepower Management Center Software | =6.2.2 | |
| Cisco Firepower Management Center Software | =6.2.2.1 | |
| Cisco Firepower Management Center Software | =6.2.2.2 | |
| Cisco Firepower Management Center Software | =6.2.2.3 | |
| Cisco Firepower Management Center Software | =6.2.2.4 | |
| Cisco Firepower Management Center Software | =6.2.2.5 | |
| Cisco Firepower Management Center Software | =6.2.3 | |
| Cisco Firepower Management Center Software | =6.2.3.1 | |
| Cisco Firepower Management Center Software | =6.2.3.2 | |
| Cisco Firepower Management Center Software | =6.2.3.3 | |
| Cisco Firepower Management Center Software | =6.2.3.4 | |
| Cisco Firepower Management Center Software | =6.2.3.5 | |
| Cisco Firepower Management Center Software | =6.2.3.6 | |
| Cisco Firepower Management Center Software | =6.2.3.7 | |
| Cisco Firepower Management Center Software | =6.2.3.8 | |
| Cisco Firepower Management Center Software | =6.2.3.9 | |
| Cisco Firepower Management Center Software | =6.2.3.10 | |
| Cisco Firepower Management Center Software | =6.2.3.11 | |
| Cisco Firepower Management Center Software | =6.2.3.12 | |
| Cisco Firepower Management Center Software | =6.2.3.13 | |
| Cisco Firepower Management Center Software | =6.2.3.14 | |
| Cisco Firepower Management Center Software | =6.2.3.15 | |
| Cisco Firepower Management Center Software | =6.2.3.16 | |
| Cisco Firepower Management Center Software | =6.2.3.17 | |
| Cisco Firepower Management Center Software | =6.2.3.18 | |
| Cisco Firepower Management Center Software | =6.3.0 | |
| Cisco Firepower Management Center Software | =6.3.0.1 | |
| Cisco Firepower Management Center Software | =6.3.0.2 | |
| Cisco Firepower Management Center Software | =6.3.0.3 | |
| Cisco Firepower Management Center Software | =6.3.0.4 | |
| Cisco Firepower Management Center Software | =6.3.0.5 | |
| Cisco Firepower Management Center Software | =6.4.0 | |
| Cisco Firepower Management Center Software | =6.4.0.1 | |
| Cisco Firepower Management Center Software | =6.4.0.2 | |
| Cisco Firepower Management Center Software | =6.4.0.3 | |
| Cisco Firepower Management Center Software | =6.4.0.4 | |
| Cisco Firepower Management Center Software | =6.4.0.5 | |
| Cisco Firepower Management Center Software | =6.4.0.6 | |
| Cisco Firepower Management Center Software | =6.4.0.7 | |
| Cisco Firepower Management Center Software | =6.4.0.8 | |
| Cisco Firepower Management Center Software | =6.4.0.9 | |
| Cisco Firepower Management Center Software | =6.4.0.10 | |
| Cisco Firepower Management Center Software | =6.4.0.11 | |
| Cisco Firepower Management Center Software | =6.4.0.12 | |
| Cisco Firepower Management Center Software | =6.4.0.13 | |
| Cisco Firepower Management Center Software | =6.4.0.14 | |
| Cisco Firepower Management Center Software | =6.4.0.15 | |
| Cisco Firepower Management Center Software | =6.5.0 | |
| Cisco Firepower Management Center Software | =6.5.0.1 | |
| Cisco Firepower Management Center Software | =6.5.0.2 | |
| Cisco Firepower Management Center Software | =6.5.0.3 | |
| Cisco Firepower Management Center Software | =6.5.0.4 | |
| Cisco Firepower Management Center Software | =6.5.0.5 | |
| Cisco Firepower Management Center Software | =6.6.0 | |
| Cisco Firepower Management Center Software | =6.6.0.1 | |
| Cisco Firepower Management Center Software | =6.6.1 | |
| Cisco Firepower Management Center Software | =6.6.3 | |
| Cisco Firepower Management Center Software | =6.6.4 | |
| Cisco Firepower Management Center Software | =6.6.5 | |
| Cisco Firepower Management Center Software | =6.6.5.1 | |
| Cisco Firepower Management Center Software | =6.6.5.2 | |
| Cisco Firepower Management Center Software | =6.6.7 | |
| Cisco Firepower Management Center Software | =6.7.0 | |
| Cisco Firepower Management Center Software | =6.7.0.1 | |
| Cisco Firepower Management Center Software | =6.7.0.2 | |
| Cisco Firepower Management Center Software | =6.7.0.3 | |
| Cisco Firepower Management Center Software | =7.0.0 | |
| Cisco Firepower Management Center Software | =7.0.0.1 | |
| Cisco Firepower Management Center Software | =7.0.1 | |
| Cisco Firepower Management Center Software | =7.0.1.1 | |
| Cisco Firepower Management Center Software | =7.0.2 | |
| Cisco Firepower Management Center Software | =7.0.2.1 | |
| Cisco Firepower Management Center Software | =7.0.3 | |
| Cisco Firepower Management Center Software | =7.0.4 | |
| Cisco Firepower Management Center Software | =7.1.0 | |
| Cisco Firepower Management Center Software | =7.1.0.1 | |
| Cisco Firepower Management Center Software | =7.1.0.2 | |
| Cisco Secure Firewall Management Center | =6.1.0 | |
| Cisco Secure Firewall Management Center | =6.1.0.1 | |
| Cisco Secure Firewall Management Center | =6.1.0.2 | |
| Cisco Secure Firewall Management Center | =6.1.0.3 | |
| Cisco Secure Firewall Management Center | =6.1.0.4 | |
| Cisco Secure Firewall Management Center | =6.1.0.5 | |
| Cisco Secure Firewall Management Center | =6.1.0.6 | |
| Cisco Secure Firewall Management Center | =6.1.0.7 | |
| Cisco Secure Firewall Management Center | =6.2.0 | |
| Cisco Secure Firewall Management Center | =6.2.0.1 | |
| Cisco Secure Firewall Management Center | =6.2.0.2 | |
| Cisco Secure Firewall Management Center | =6.2.0.3 | |
| Cisco Secure Firewall Management Center | =6.2.0.4 | |
| Cisco Secure Firewall Management Center | =6.2.0.5 | |
| Cisco Secure Firewall Management Center | =6.2.0.6 | |
| Cisco Secure Firewall Management Center | =6.2.1 | |
| Cisco Secure Firewall Management Center | =6.2.2 | |
| Cisco Secure Firewall Management Center | =6.2.2.1 | |
| Cisco Secure Firewall Management Center | =6.2.2.2 | |
| Cisco Secure Firewall Management Center | =6.2.2.3 | |
| Cisco Secure Firewall Management Center | =6.2.2.4 | |
| Cisco Secure Firewall Management Center | =6.2.2.5 | |
| Cisco Secure Firewall Management Center | =6.2.3 | |
| Cisco Secure Firewall Management Center | =6.2.3.1 | |
| Cisco Secure Firewall Management Center | =6.2.3.2 | |
| Cisco Secure Firewall Management Center | =6.2.3.3 | |
| Cisco Secure Firewall Management Center | =6.2.3.4 | |
| Cisco Secure Firewall Management Center | =6.2.3.5 | |
| Cisco Secure Firewall Management Center | =6.2.3.6 | |
| Cisco Secure Firewall Management Center | =6.2.3.7 | |
| Cisco Secure Firewall Management Center | =6.2.3.8 | |
| Cisco Secure Firewall Management Center | =6.2.3.9 | |
| Cisco Secure Firewall Management Center | =6.2.3.10 | |
| Cisco Secure Firewall Management Center | =6.2.3.11 | |
| Cisco Secure Firewall Management Center | =6.2.3.12 | |
| Cisco Secure Firewall Management Center | =6.2.3.13 | |
| Cisco Secure Firewall Management Center | =6.2.3.14 | |
| Cisco Secure Firewall Management Center | =6.2.3.15 | |
| Cisco Secure Firewall Management Center | =6.2.3.16 | |
| Cisco Secure Firewall Management Center | =6.2.3.17 | |
| Cisco Secure Firewall Management Center | =6.2.3.18 | |
| Cisco Secure Firewall Management Center | =6.3.0 | |
| Cisco Secure Firewall Management Center | =6.3.0.1 | |
| Cisco Secure Firewall Management Center | =6.3.0.2 | |
| Cisco Secure Firewall Management Center | =6.3.0.3 | |
| Cisco Secure Firewall Management Center | =6.3.0.4 | |
| Cisco Secure Firewall Management Center | =6.3.0.5 | |
| Cisco Secure Firewall Management Center | =6.4.0 | |
| Cisco Secure Firewall Management Center | =6.4.0.1 | |
| Cisco Secure Firewall Management Center | =6.4.0.2 | |
| Cisco Secure Firewall Management Center | =6.4.0.3 | |
| Cisco Secure Firewall Management Center | =6.4.0.4 | |
| Cisco Secure Firewall Management Center | =6.4.0.5 | |
| Cisco Secure Firewall Management Center | =6.4.0.6 | |
| Cisco Secure Firewall Management Center | =6.4.0.7 | |
| Cisco Secure Firewall Management Center | =6.4.0.8 | |
| Cisco Secure Firewall Management Center | =6.4.0.9 | |
| Cisco Secure Firewall Management Center | =6.4.0.10 | |
| Cisco Secure Firewall Management Center | =6.4.0.11 | |
| Cisco Secure Firewall Management Center | =6.4.0.12 | |
| Cisco Secure Firewall Management Center | =6.4.0.13 | |
| Cisco Secure Firewall Management Center | =6.4.0.14 | |
| Cisco Secure Firewall Management Center | =6.4.0.15 | |
| Cisco Secure Firewall Management Center | =6.5.0 | |
| Cisco Secure Firewall Management Center | =6.5.0.1 | |
| Cisco Secure Firewall Management Center | =6.5.0.2 | |
| Cisco Secure Firewall Management Center | =6.5.0.3 | |
| Cisco Secure Firewall Management Center | =6.5.0.4 | |
| Cisco Secure Firewall Management Center | =6.5.0.5 | |
| Cisco Secure Firewall Management Center | =6.6.0 | |
| Cisco Secure Firewall Management Center | =6.6.0.1 | |
| Cisco Secure Firewall Management Center | =6.6.1 | |
| Cisco Secure Firewall Management Center | =6.6.3 | |
| Cisco Secure Firewall Management Center | =6.6.4 | |
| Cisco Secure Firewall Management Center | =6.6.5 | |
| Cisco Secure Firewall Management Center | =6.6.5.1 | |
| Cisco Secure Firewall Management Center | =6.6.5.2 | |
| Cisco Secure Firewall Management Center | =6.6.7 | |
| Cisco Secure Firewall Management Center | =6.7.0 | |
| Cisco Secure Firewall Management Center | =6.7.0.1 | |
| Cisco Secure Firewall Management Center | =6.7.0.2 | |
| Cisco Secure Firewall Management Center | =6.7.0.3 | |
| Cisco Secure Firewall Management Center | =7.0.0 | |
| Cisco Secure Firewall Management Center | =7.0.0.1 | |
| Cisco Secure Firewall Management Center | =7.0.1 | |
| Cisco Secure Firewall Management Center | =7.0.1.1 | |
| Cisco Secure Firewall Management Center | =7.0.2 | |
| Cisco Secure Firewall Management Center | =7.0.2.1 | |
| Cisco Secure Firewall Management Center | =7.0.3 | |
| Cisco Secure Firewall Management Center | =7.0.4 | |
| Cisco Secure Firewall Management Center | =7.1.0 | |
| Cisco Secure Firewall Management Center | =7.1.0.1 | |
| Cisco Secure Firewall Management Center | =7.1.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-20941?
CVE-2022-20941 has a high severity rating, indicating a significant risk to affected systems.
How do I fix CVE-2022-20941?
To mitigate CVE-2022-20941, update to the latest version of Cisco Firepower Management Center Software as recommended in Cisco's security advisories.
What vulnerabilities are associated with CVE-2022-20941?
CVE-2022-20941 is associated with an unauthorized access vulnerability that can lead to disclosure of sensitive information.
What versions of Cisco Firepower Management Center are affected by CVE-2022-20941?
CVE-2022-20941 affects multiple versions of Cisco Firepower Management Center Software, specifically versions 6.1.0 through 7.1.0.2.
Can an attacker exploit CVE-2022-20941 remotely?
Yes, CVE-2022-20941 can be exploited by an unauthenticated, remote attacker, making it particularly dangerous.
- agent/type
- agent/weakness
- agent/references
- agent/severity
- agent/first-publish-date
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/cisco
- canonical/cisco firepower management center software
- version/cisco firepower management center software/6.1.0
- version/cisco firepower management center software/6.1.0.1
- version/cisco firepower management center software/6.1.0.2
- version/cisco firepower management center software/6.1.0.3
- version/cisco firepower management center software/6.1.0.4
- version/cisco firepower management center software/6.1.0.5
- version/cisco firepower management center software/6.1.0.6
- version/cisco firepower management center software/6.1.0.7
- version/cisco firepower management center software/6.2.0
- version/cisco firepower management center software/6.2.0.1
- version/cisco firepower management center software/6.2.0.2
- version/cisco firepower management center software/6.2.0.3
- version/cisco firepower management center software/6.2.0.4
- version/cisco firepower management center software/6.2.0.5
- version/cisco firepower management center software/6.2.0.6
- version/cisco firepower management center software/6.2.1
- version/cisco firepower management center software/6.2.2
- version/cisco firepower management center software/6.2.2.1
- version/cisco firepower management center software/6.2.2.2
- version/cisco firepower management center software/6.2.2.3
- version/cisco firepower management center software/6.2.2.4
- version/cisco firepower management center software/6.2.2.5
- version/cisco firepower management center software/6.2.3
- version/cisco firepower management center software/6.2.3.1
- version/cisco firepower management center software/6.2.3.2
- version/cisco firepower management center software/6.2.3.3
- version/cisco firepower management center software/6.2.3.4
- version/cisco firepower management center software/6.2.3.5
- version/cisco firepower management center software/6.2.3.6
- version/cisco firepower management center software/6.2.3.7
- version/cisco firepower management center software/6.2.3.8
- version/cisco firepower management center software/6.2.3.9
- version/cisco firepower management center software/6.2.3.10
- version/cisco firepower management center software/6.2.3.11
- version/cisco firepower management center software/6.2.3.12
- version/cisco firepower management center software/6.2.3.13
- version/cisco firepower management center software/6.2.3.14
- version/cisco firepower management center software/6.2.3.15
- version/cisco firepower management center software/6.2.3.16
- version/cisco firepower management center software/6.2.3.17
- version/cisco firepower management center software/6.2.3.18
- version/cisco firepower management center software/6.3.0
- version/cisco firepower management center software/6.3.0.1
- version/cisco firepower management center software/6.3.0.2
- version/cisco firepower management center software/6.3.0.3
- version/cisco firepower management center software/6.3.0.4
- version/cisco firepower management center software/6.3.0.5
- version/cisco firepower management center software/6.4.0
- version/cisco firepower management center software/6.4.0.1
- version/cisco firepower management center software/6.4.0.2
- version/cisco firepower management center software/6.4.0.3
- version/cisco firepower management center software/6.4.0.4
- version/cisco firepower management center software/6.4.0.5
- version/cisco firepower management center software/6.4.0.6
- version/cisco firepower management center software/6.4.0.7
- version/cisco firepower management center software/6.4.0.8
- version/cisco firepower management center software/6.4.0.9
- version/cisco firepower management center software/6.4.0.10
- version/cisco firepower management center software/6.4.0.11
- version/cisco firepower management center software/6.4.0.12
- version/cisco firepower management center software/6.4.0.13
- version/cisco firepower management center software/6.4.0.14
- version/cisco firepower management center software/6.4.0.15
- version/cisco firepower management center software/6.5.0
- version/cisco firepower management center software/6.5.0.1
- version/cisco firepower management center software/6.5.0.2
- version/cisco firepower management center software/6.5.0.3
- version/cisco firepower management center software/6.5.0.4
- version/cisco firepower management center software/6.5.0.5
- version/cisco firepower management center software/6.6.0
- version/cisco firepower management center software/6.6.0.1
- version/cisco firepower management center software/6.6.1
- version/cisco firepower management center software/6.6.3
- version/cisco firepower management center software/6.6.4
- version/cisco firepower management center software/6.6.5
- version/cisco firepower management center software/6.6.5.1
- version/cisco firepower management center software/6.6.5.2
- version/cisco firepower management center software/6.6.7
- version/cisco firepower management center software/6.7.0
- version/cisco firepower management center software/6.7.0.1
- version/cisco firepower management center software/6.7.0.2
- version/cisco firepower management center software/6.7.0.3
- version/cisco firepower management center software/7.0.0
- version/cisco firepower management center software/7.0.0.1
- version/cisco firepower management center software/7.0.1
- version/cisco firepower management center software/7.0.1.1
- version/cisco firepower management center software/7.0.2
- version/cisco firepower management center software/7.0.2.1
- version/cisco firepower management center software/7.0.3
- version/cisco firepower management center software/7.0.4
- version/cisco firepower management center software/7.1.0
- version/cisco firepower management center software/7.1.0.1
- version/cisco firepower management center software/7.1.0.2
- canonical/cisco secure firewall management center
- version/cisco secure firewall management center/6.1.0
- version/cisco secure firewall management center/6.1.0.1
- version/cisco secure firewall management center/6.1.0.2
- version/cisco secure firewall management center/6.1.0.3
- version/cisco secure firewall management center/6.1.0.4
- version/cisco secure firewall management center/6.1.0.5
- version/cisco secure firewall management center/6.1.0.6
- version/cisco secure firewall management center/6.1.0.7
- version/cisco secure firewall management center/6.2.0
- version/cisco secure firewall management center/6.2.0.1
- version/cisco secure firewall management center/6.2.0.2
- version/cisco secure firewall management center/6.2.0.3
- version/cisco secure firewall management center/6.2.0.4
- version/cisco secure firewall management center/6.2.0.5
- version/cisco secure firewall management center/6.2.0.6
- version/cisco secure firewall management center/6.2.1
- version/cisco secure firewall management center/6.2.2
- version/cisco secure firewall management center/6.2.2.1
- version/cisco secure firewall management center/6.2.2.2
- version/cisco secure firewall management center/6.2.2.3
- version/cisco secure firewall management center/6.2.2.4
- version/cisco secure firewall management center/6.2.2.5
- version/cisco secure firewall management center/6.2.3
- version/cisco secure firewall management center/6.2.3.1
- version/cisco secure firewall management center/6.2.3.2
- version/cisco secure firewall management center/6.2.3.3
- version/cisco secure firewall management center/6.2.3.4
- version/cisco secure firewall management center/6.2.3.5
- version/cisco secure firewall management center/6.2.3.6
- version/cisco secure firewall management center/6.2.3.7
- version/cisco secure firewall management center/6.2.3.8
- version/cisco secure firewall management center/6.2.3.9
- version/cisco secure firewall management center/6.2.3.10
- version/cisco secure firewall management center/6.2.3.11
- version/cisco secure firewall management center/6.2.3.12
- version/cisco secure firewall management center/6.2.3.13
- version/cisco secure firewall management center/6.2.3.14
- version/cisco secure firewall management center/6.2.3.15
- version/cisco secure firewall management center/6.2.3.16
- version/cisco secure firewall management center/6.2.3.17
- version/cisco secure firewall management center/6.2.3.18
- version/cisco secure firewall management center/6.3.0
- version/cisco secure firewall management center/6.3.0.1
- version/cisco secure firewall management center/6.3.0.2
- version/cisco secure firewall management center/6.3.0.3
- version/cisco secure firewall management center/6.3.0.4
- version/cisco secure firewall management center/6.3.0.5
- version/cisco secure firewall management center/6.4.0
- version/cisco secure firewall management center/6.4.0.1
- version/cisco secure firewall management center/6.4.0.2
- version/cisco secure firewall management center/6.4.0.3
- version/cisco secure firewall management center/6.4.0.4
- version/cisco secure firewall management center/6.4.0.5
- version/cisco secure firewall management center/6.4.0.6
- version/cisco secure firewall management center/6.4.0.7
- version/cisco secure firewall management center/6.4.0.8
- version/cisco secure firewall management center/6.4.0.9
- version/cisco secure firewall management center/6.4.0.10
- version/cisco secure firewall management center/6.4.0.11
- version/cisco secure firewall management center/6.4.0.12
- version/cisco secure firewall management center/6.4.0.13
- version/cisco secure firewall management center/6.4.0.14
- version/cisco secure firewall management center/6.4.0.15
- version/cisco secure firewall management center/6.5.0
- version/cisco secure firewall management center/6.5.0.1
- version/cisco secure firewall management center/6.5.0.2
- version/cisco secure firewall management center/6.5.0.3
- version/cisco secure firewall management center/6.5.0.4
- version/cisco secure firewall management center/6.5.0.5
- version/cisco secure firewall management center/6.6.0
- version/cisco secure firewall management center/6.6.0.1
- version/cisco secure firewall management center/6.6.1
- version/cisco secure firewall management center/6.6.3
- version/cisco secure firewall management center/6.6.4
- version/cisco secure firewall management center/6.6.5
- version/cisco secure firewall management center/6.6.5.1
- version/cisco secure firewall management center/6.6.5.2
- version/cisco secure firewall management center/6.6.7
- version/cisco secure firewall management center/6.7.0
- version/cisco secure firewall management center/6.7.0.1
- version/cisco secure firewall management center/6.7.0.2
- version/cisco secure firewall management center/6.7.0.3
- version/cisco secure firewall management center/7.0.0
- version/cisco secure firewall management center/7.0.0.1
- version/cisco secure firewall management center/7.0.1
- version/cisco secure firewall management center/7.0.1.1
- version/cisco secure firewall management center/7.0.2
- version/cisco secure firewall management center/7.0.2.1
- version/cisco secure firewall management center/7.0.3
- version/cisco secure firewall management center/7.0.4
- version/cisco secure firewall management center/7.1.0
- version/cisco secure firewall management center/7.1.0.1
- version/cisco secure firewall management center/7.1.0.2