Cisco Secure Firewall Management Center Software SQL Injection Vulnerability
Cisco · Cisco Secure Firewall Management Center (FMC)
Higher than 42% of scored CVEs
DescriptionNVD
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack against an affected device. To exploit this vulnerability, the attacker must have a valid account on the device with the role of Security Approver, Access Admin, or Network Admin. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to obtain any data from the database, obtain the session credentials of an authenticated Administrator, and take actions with administrative privileges on the affected device.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 17 Sep.
- Cisco Patches Firewall Flaws Enabling Unauthenticated Root AccessSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.