cisco-sa-fmc-object-bypass-fTH8tDjq: Cisco Firepower Management Center Software Object Group Access Control List Bypass Vulnerability

Published May 22, 2024
·
Updated

A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass configured access controls on managed devices that are running Cisco Firepower Threat Defense (FTD)

Affected Software

2 affected components
Cisco Firepower Management Center Software
Cisco Firepower Threat Defense

Event History

May 22, 2024
Advisory Published
via Cisco·04:00 PM
Data Sourced
via Cisco·04:00 PM
DescriptionSeverityWeakness

Child vulnerabilities

Contains the following vulnerabilities.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of cisco-sa-fmc-object-bypass-fTH8tDjq?

The severity level of the cisco-sa-fmc-object-bypass-fTH8tDjq vulnerability is considered high due to its potential to allow remote attackers to bypass access controls.

2

How do I fix cisco-sa-fmc-object-bypass-fTH8tDjq?

To fix the cisco-sa-fmc-object-bypass-fTH8tDjq vulnerability, ensure that you update your Cisco Firepower Management Center Software and Firepower Threat Defense to the latest patched versions.

3

What types of devices are affected by cisco-sa-fmc-object-bypass-fTH8tDjq?

The cisco-sa-fmc-object-bypass-fTH8tDjq vulnerability affects devices running Cisco Firepower Management Center Software and Cisco Firepower Threat Defense.

4

Can cisco-sa-fmc-object-bypass-fTH8tDjq be exploited remotely?

Yes, the cisco-sa-fmc-object-bypass-fTH8tDjq vulnerability can be exploited by an unauthenticated, remote attacker.

5

What could happen if cisco-sa-fmc-object-bypass-fTH8tDjq is exploited?

If cisco-sa-fmc-object-bypass-fTH8tDjq is exploited, an attacker could bypass access controls, potentially compromising the managed devices' security.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203