cisco-sa-fmc-cmd-inj-Z3B5MY35: Cisco Firepower Management Center Software Command Injection Vulnerabilities
First published: Wed Nov 09 2022(Updated: )
Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. These vulnerabilities are due to insufficient validation of user-supplied parameters for certain API endpoints. An attacker could exploit these vulnerabilities by sending crafted input to an affected API endpoint. A successful exploit could allow an attacker to execute arbitrary commands on the device with low system privileges. To successfully exploit these vulnerabilities, an attacker would need valid credentials for a user who has Devices permissions. By default, only Administrator, Security Approver and Network Admin roles have these permissions. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-Z3B5MY35 This advisory is part of the November 2022 release of the Cisco ASA, FTD, and FMC Security Advisory Bundled publication. For a complete list of the advisories and links to them, see Cisco Event Response: November 2022 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.
Credit: These vulnerabilities were found by Brandon Sakai Cisco during internal security testing
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower Management Center |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-fmc-cmd-inj-Z3B5MY35?
The severity of cisco-sa-fmc-cmd-inj-Z3B5MY35 is classified as high due to the potential for remote command injection.
How do I fix cisco-sa-fmc-cmd-inj-Z3B5MY35?
To remediate cisco-sa-fmc-cmd-inj-Z3B5MY35, ensure that your Cisco Firepower Management Center Software is updated to the latest patched version.
What types of attacks are associated with cisco-sa-fmc-cmd-inj-Z3B5MY35?
cisco-sa-fmc-cmd-inj-Z3B5MY35 is associated with command injection attacks that exploit insufficient input validation.
Who is impacted by cisco-sa-fmc-cmd-inj-Z3B5MY35?
Organizations using vulnerable versions of Cisco Firepower Management Center Software are impacted by cisco-sa-fmc-cmd-inj-Z3B5MY35.
Is authentication required to exploit cisco-sa-fmc-cmd-inj-Z3B5MY35?
Yes, exploitation of cisco-sa-fmc-cmd-inj-Z3B5MY35 requires that the attacker has valid authentication to the system.
- collector/cisco-advisory
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/references
- agent/severity
- agent/title
- agent/author
- agent/description
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco firepower management center