CVE-2024-20273: Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability

Published Oct 23, 2024

Updated

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by inserting crafted input into various data fields in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface, or access sensitive, browser-based information.

Affected Software

83 affected components

Cisco Secure Firewall Management Center=6.2.3

Cisco Secure Firewall Management Center=6.2.3.1

Cisco Secure Firewall Management Center=6.2.3.2

Cisco Secure Firewall Management Center=6.2.3.3

Cisco Secure Firewall Management Center=6.2.3.4

Cisco Secure Firewall Management Center=6.2.3.5

Cisco Secure Firewall Management Center=6.2.3.6

Cisco Secure Firewall Management Center=6.2.3.7

Cisco Secure Firewall Management Center=6.2.3.8

Cisco Secure Firewall Management Center=6.2.3.9

Cisco Secure Firewall Management Center=6.2.3.10

Cisco Secure Firewall Management Center=6.2.3.11

Cisco Secure Firewall Management Center=6.2.3.12

Cisco Secure Firewall Management Center=6.2.3.13

Cisco Secure Firewall Management Center=6.2.3.14

Cisco Secure Firewall Management Center=6.2.3.15

Cisco Secure Firewall Management Center=6.2.3.16

Cisco Secure Firewall Management Center=6.2.3.17

Cisco Secure Firewall Management Center=6.2.3.18

Cisco Secure Firewall Management Center=6.4.0

Cisco Secure Firewall Management Center=6.4.0.1

Cisco Secure Firewall Management Center=6.4.0.2

Cisco Secure Firewall Management Center=6.4.0.3

Cisco Secure Firewall Management Center=6.4.0.4

Cisco Secure Firewall Management Center=6.4.0.5

Cisco Secure Firewall Management Center=6.4.0.6

Cisco Secure Firewall Management Center=6.4.0.7

Cisco Secure Firewall Management Center=6.4.0.8

Cisco Secure Firewall Management Center=6.4.0.9

Cisco Secure Firewall Management Center=6.4.0.10

Cisco Secure Firewall Management Center=6.4.0.11

Cisco Secure Firewall Management Center=6.4.0.12

Cisco Secure Firewall Management Center=6.4.0.13

Cisco Secure Firewall Management Center=6.4.0.14

Cisco Secure Firewall Management Center=6.4.0.15

Cisco Secure Firewall Management Center=6.4.0.16

Cisco Secure Firewall Management Center=6.4.0.17

Cisco Secure Firewall Management Center=6.6.0

Cisco Secure Firewall Management Center=6.6.0.1

Cisco Secure Firewall Management Center=6.6.1

Cisco Secure Firewall Management Center=6.6.3

Cisco Secure Firewall Management Center=6.6.4

Cisco Secure Firewall Management Center=6.6.5

Cisco Secure Firewall Management Center=6.6.5.1

Cisco Secure Firewall Management Center=6.6.5.2

Cisco Secure Firewall Management Center=6.6.7

Cisco Secure Firewall Management Center=6.6.7.1

Cisco Secure Firewall Management Center=6.6.7.2

Cisco Secure Firewall Management Center=6.7.0

Cisco Secure Firewall Management Center=6.7.0.1

Cisco Secure Firewall Management Center=6.7.0.2

Cisco Secure Firewall Management Center=6.7.0.3

Cisco Secure Firewall Management Center=7.0.0

Cisco Secure Firewall Management Center=7.0.0.1

Cisco Secure Firewall Management Center=7.0.1

Cisco Secure Firewall Management Center=7.0.1.1

Cisco Secure Firewall Management Center=7.0.2

Cisco Secure Firewall Management Center=7.0.2.1

Cisco Secure Firewall Management Center=7.0.3

Cisco Secure Firewall Management Center=7.0.4

Cisco Secure Firewall Management Center=7.0.5

Cisco Secure Firewall Management Center=7.0.6

Cisco Secure Firewall Management Center=7.0.6.1

Cisco Secure Firewall Management Center=7.1.0

Cisco Secure Firewall Management Center=7.1.0.1

Cisco Secure Firewall Management Center=7.1.0.2

Cisco Secure Firewall Management Center=7.1.0.3

Cisco Secure Firewall Management Center=7.2.0

Cisco Secure Firewall Management Center=7.2.0.1

Cisco Secure Firewall Management Center=7.2.1

Cisco Secure Firewall Management Center=7.2.2

Cisco Secure Firewall Management Center=7.2.3

Cisco Secure Firewall Management Center=7.2.3.1

Cisco Secure Firewall Management Center=7.2.4

Cisco Secure Firewall Management Center=7.2.4.1

Cisco Secure Firewall Management Center=7.2.5

Cisco Secure Firewall Management Center=7.2.5.1

Cisco Secure Firewall Management Center=7.2.5.2

Cisco Secure Firewall Management Center=7.3.0

Cisco Secure Firewall Management Center=7.3.1

Cisco Secure Firewall Management Center=7.3.1.1

Cisco Secure Firewall Management Center=7.3.1.2

Cisco Secure Firewall Management Center=7.4.0

Event History

Oct 23, 2024

CVE Published

via MITRE·05:07 PM

Data Sourced

via MITRE·05:07 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-20273?

CVE-2024-20273 has a CVSS score indicating a medium severity vulnerability that could allow for cross-site scripting (XSS) attacks.

How do I fix CVE-2024-20273?

To remediate CVE-2024-20273, upgrade to the latest patched version of Cisco Secure Firewall Management Center as recommended by Cisco.

What does CVE-2024-20273 affect?

CVE-2024-20273 affects various versions of Cisco Secure Firewall Management Center software, specifically versions 6.2.3 through 7.4.0.

Can CVE-2024-20273 be exploited remotely?

Yes, CVE-2024-20273 can be exploited by an unauthenticated remote attacker through the web-based management interface.

What type of attack is associated with CVE-2024-20273?

CVE-2024-20273 is associated with cross-site scripting (XSS) attacks that can compromise user sessions.