PT-2022-5810 · Cisco · Cisco Firepower Management Center (Fmc)+1

Published 2022-11-09 · Updated 2024-01-25 · CVE-2022-20949

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the management web server of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on an affected system. This issue exists because access to HTTPS endpoints is not properly restricted on an affected device. An attacker could exploit this by sending specific messages to the affected HTTPS handler, potentially allowing them to perform configuration changes on the system, which should only be managed through Cisco Firepower Management Center (FMC) Software.

Recommendations For Cisco Firepower Threat Defense (FTD) Software, consider restricting access to the management web server to minimize the risk of exploitation. As a temporary workaround, consider disabling access to HTTPS endpoints until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2022-07215

CVE-2022-20949

Affected Products

Cisco Firepower Management Center (Fmc)

Cisco Ftd

References · 5

• https://bdu.fstec.ru/vul/2022-07215 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-20949 · Security Note
• https://osv.dev/vulnerability/CVE-2022-20949 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-mgmt-privesc-7GqR2th · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-mgmt-privesc-7GqR2th · Note