PT-2020-2510 · Cisco · Cisco Firepower Management Center+1

Published 2020-05-06 · Updated 2024-11-26 · CVE-2020-3301

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center (FMC) Software (affected versions not specified) Cisco Firepower User Agent Software (affected versions not specified)

Description The issue concerns multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software. These vulnerabilities could allow an attacker to access a sensitive part of an affected system with a high-privileged account. The vulnerabilities are related to hard-coded registration data, which could enable a remote attacker to gain full access to the system using a high-privileged account.

Recommendations For Cisco Firepower Management Center (FMC) Software, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Cisco Firepower User Agent Software, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2020-02521

CVE-2020-3301

Affected Products

Cisco Firepower Management Center

Cisco Firepower User Agent

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmcua-statcred-weeCcZct · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3301 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3301 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02521 · Security Note
• https://t.me/cvenotify/3596 · Telegram Post