cisco-sa-ftd-fmc-code-inj-wSHrgz8L: Cisco Firepower Threat Defense Software and Firepower Management Center Software Code Injection Vulnerability
First published: Wed Nov 01 2023(Updated: )
A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devices that are running Cisco Firepower Management (FMC) Software could allow an authenticated, local attacker to execute arbitrary commands with
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Firewall Threat Defense | ||
| Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of Cisco-SA-FTD-FMC-Code-Inj-WSHrgz8L?
The severity of Cisco-SA-FTD-FMC-Code-Inj-WSHrgz8L is critical due to the potential for arbitrary command execution by authenticated local attackers.
How do I fix Cisco-SA-FTD-FMC-Code-Inj-WSHrgz8L?
To fix Cisco-SA-FTD-FMC-Code-Inj-WSHrgz8L, update Cisco Firepower Threat Defense and Cisco Firepower Management Center to the latest patched versions.
What are the potential impacts of Cisco-SA-FTD-FMC-Code-Inj-WSHrgz8L?
The potential impacts include unauthorized execution of commands, which can compromise system integrity and confidentiality.
Who is affected by Cisco-SA-FTD-FMC-Code-Inj-WSHrgz8L?
Devices running affected versions of Cisco Firepower Threat Defense (FTD) and Cisco Firepower Management Center (FMC) Software are vulnerable.
Is remote access required for exploiting Cisco-SA-FTD-FMC-Code-Inj-WSHrgz8L?
No, a local authenticated attacker is required to exploit Cisco-SA-FTD-FMC-Code-Inj-WSHrgz8L.
- agent/type
- agent/event
- agent/first-publish-date
- agent/title
- agent/severity
- agent/weakness
- agent/references
- agent/description
- collector/cisco-recent
- source/Cisco
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco secure firewall threat defense
- canonical/cisco firepower management center (fmc) and firepower threat defense (ftd) software