PT-2022-6146 · Cisco · Cisco Firepower Management Center

Sanmith Prakash · Published 2022-11-09 · Updated 2024-11-26 · CVE-2022-20938

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center (FMC) Software (affected versions not specified)

Description A vulnerability in the module import function of the administrative interface could allow an authenticated, remote attacker to view sensitive information. This issue is due to insufficient validation of the XML syntax when importing a module. An attacker could exploit this by supplying a specially crafted XML file to the function, potentially allowing them to read sensitive data that would normally not be revealed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

BDU:2023-00172

CVE-2022-20938

Affected Products

Cisco Firepower Management Center

References · 6

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xxe-MzPC4bYd · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20938 · Security Note
• https://osv.dev/vulnerability/CVE-2022-20938 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00172 · Security Note
• https://t.me/cvenotify/37807 · Telegram Post
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xxe-MzPC4bYd · Note