cisco-sa-fmc-file-download-7js4ug2J: Cisco Firepower Management Center Software Arbitrary File Download Vulnerability
First published: Wed Nov 01 2023(Updated: )
A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to download arbitrary files from an affected system.This vulnerability is due to a lack of input sanitation. An attacker could exploit
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower Management Center |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-fmc-file-download-7js4ug2J?
The cisco-sa-fmc-file-download-7js4ug2J vulnerability has a high severity rating due to its potential for unauthorized file access.
How do I fix cisco-sa-fmc-file-download-7js4ug2J?
To mitigate the cisco-sa-fmc-file-download-7js4ug2J vulnerability, users should apply the latest patches provided by Cisco for the Firepower Management Center Software.
What type of attack can exploit cisco-sa-fmc-file-download-7js4ug2J?
cisco-sa-fmc-file-download-7js4ug2J can be exploited by an authenticated, remote attacker to download arbitrary files from the system.
Is authentication required to exploit cisco-sa-fmc-file-download-7js4ug2J?
Yes, authentication is required for an attacker to exploit the cisco-sa-fmc-file-download-7js4ug2J vulnerability.
What causes the cisco-sa-fmc-file-download-7js4ug2J vulnerability?
The cisco-sa-fmc-file-download-7js4ug2J vulnerability is caused by a lack of input sanitation in the file download feature of Cisco FMC Software.
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-recent
- source/Cisco
- agent/title
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco firepower management center