CVE-2024-20300: Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability

Published Oct 23, 2024

Updated

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by inserting crafted input into various data fields in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface, or access sensitive, browser-based information.

Affected Software

85 affected components

Cisco Secure Firewall Management Center=6.2.3

Cisco Secure Firewall Management Center=6.2.3.1

Cisco Secure Firewall Management Center=6.2.3.2

Cisco Secure Firewall Management Center=6.2.3.3

Cisco Secure Firewall Management Center=6.2.3.4

Cisco Secure Firewall Management Center=6.2.3.5

Cisco Secure Firewall Management Center=6.2.3.6

Cisco Secure Firewall Management Center=6.2.3.7

Cisco Secure Firewall Management Center=6.2.3.8

Cisco Secure Firewall Management Center=6.2.3.9

Cisco Secure Firewall Management Center=6.2.3.10

Cisco Secure Firewall Management Center=6.2.3.11

Cisco Secure Firewall Management Center=6.2.3.12

Cisco Secure Firewall Management Center=6.2.3.13

Cisco Secure Firewall Management Center=6.2.3.14

Cisco Secure Firewall Management Center=6.2.3.15

Cisco Secure Firewall Management Center=6.2.3.16

Cisco Secure Firewall Management Center=6.2.3.17

Cisco Secure Firewall Management Center=6.2.3.18

Cisco Secure Firewall Management Center=6.4.0

Cisco Secure Firewall Management Center=6.4.0.1

Cisco Secure Firewall Management Center=6.4.0.2

Cisco Secure Firewall Management Center=6.4.0.3

Cisco Secure Firewall Management Center=6.4.0.4

Cisco Secure Firewall Management Center=6.4.0.5

Cisco Secure Firewall Management Center=6.4.0.6

Cisco Secure Firewall Management Center=6.4.0.7

Cisco Secure Firewall Management Center=6.4.0.8

Cisco Secure Firewall Management Center=6.4.0.9

Cisco Secure Firewall Management Center=6.4.0.10

Cisco Secure Firewall Management Center=6.4.0.11

Cisco Secure Firewall Management Center=6.4.0.12

Cisco Secure Firewall Management Center=6.4.0.13

Cisco Secure Firewall Management Center=6.4.0.14

Cisco Secure Firewall Management Center=6.4.0.15

Cisco Secure Firewall Management Center=6.4.0.16

Cisco Secure Firewall Management Center=6.4.0.17

Cisco Secure Firewall Management Center=6.6.0

Cisco Secure Firewall Management Center=6.6.0.1

Cisco Secure Firewall Management Center=6.6.1

Cisco Secure Firewall Management Center=6.6.3

Cisco Secure Firewall Management Center=6.6.4

Cisco Secure Firewall Management Center=6.6.5

Cisco Secure Firewall Management Center=6.6.5.1

Cisco Secure Firewall Management Center=6.6.5.2

Cisco Secure Firewall Management Center=6.6.7

Cisco Secure Firewall Management Center=6.6.7.1

Cisco Secure Firewall Management Center=6.6.7.2

Cisco Secure Firewall Management Center=6.7.0

Cisco Secure Firewall Management Center=6.7.0.1

Cisco Secure Firewall Management Center=6.7.0.2

Cisco Secure Firewall Management Center=6.7.0.3

Cisco Secure Firewall Management Center=7.0.0

Cisco Secure Firewall Management Center=7.0.0.1

Cisco Secure Firewall Management Center=7.0.1

Cisco Secure Firewall Management Center=7.0.1.1

Cisco Secure Firewall Management Center=7.0.2

Cisco Secure Firewall Management Center=7.0.2.1

Cisco Secure Firewall Management Center=7.0.3

Cisco Secure Firewall Management Center=7.0.4

Cisco Secure Firewall Management Center=7.0.5

Cisco Secure Firewall Management Center=7.0.6

Cisco Secure Firewall Management Center=7.0.6.1

Cisco Secure Firewall Management Center=7.1.0

Cisco Secure Firewall Management Center=7.1.0.1

Cisco Secure Firewall Management Center=7.1.0.2

Cisco Secure Firewall Management Center=7.1.0.3

Cisco Secure Firewall Management Center=7.2.0

Cisco Secure Firewall Management Center=7.2.0.1

Cisco Secure Firewall Management Center=7.2.1

Cisco Secure Firewall Management Center=7.2.2

Cisco Secure Firewall Management Center=7.2.3

Cisco Secure Firewall Management Center=7.2.3.1

Cisco Secure Firewall Management Center=7.2.4

Cisco Secure Firewall Management Center=7.2.4.1

Cisco Secure Firewall Management Center=7.2.5

Cisco Secure Firewall Management Center=7.2.5.1

Cisco Secure Firewall Management Center=7.2.5.2

Cisco Secure Firewall Management Center=7.3.0

Cisco Secure Firewall Management Center=7.3.1

Cisco Secure Firewall Management Center=7.3.1.1

Cisco Secure Firewall Management Center=7.3.1.2

Cisco Secure Firewall Management Center=7.4.0

Cisco Secure Firewall Management Center=7.4.1

Cisco Secure Firewall Management Center=7.4.1.1

Event History

Oct 23, 2024

CVE Published

via MITRE·05:08 PM

Data Sourced

via MITRE·05:08 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-20300?

The severity of CVE-2024-20300 is classified as high, indicating a significant risk associated with exploiting this vulnerability.

How do I fix CVE-2024-20300?

To mitigate CVE-2024-20300, upgrade the Cisco Firepower Management Center software to a fixed version as recommended by Cisco.

What versions are affected by CVE-2024-20300?

CVE-2024-20300 affects multiple versions of Cisco Secure Firewall Management Center software, including versions 6.2.3 through 7.4.1.1.

Can CVE-2024-20300 be exploited remotely?

Yes, CVE-2024-20300 can be exploited by an authenticated, remote attacker against a user of the web-based management interface.

Does CVE-2024-20300 require user interaction for exploitation?

Yes, exploitation of CVE-2024-20300 typically requires user interaction for the attack to succeed.