PT-2020-2511 · Cisco · Cisco Firepower Management Center+1

Published 2020-05-06 · Updated 2024-11-26 · CVE-2020-3318

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center (FMC) Software (affected versions not specified) Cisco Firepower User Agent Software (affected versions not specified)

Description The issue is related to multiple vulnerabilities in the software that could allow an attacker to access a sensitive part of an affected system with a high-privileged account. The vulnerabilities are associated with hard-coded registration data, which could allow a remote attacker to gain full access to the system using a high-privileged account.

Recommendations For Cisco Firepower Management Center (FMC) Software, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Cisco Firepower User Agent Software, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2020-02522

CVE-2020-3318

Affected Products

Cisco Firepower Management Center

Cisco Firepower User Agent

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-3318 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmcua-statcred-weeCcZct · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3318 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02522 · Security Note