PT-2023-6705 · Cisco · Firepower Threat Defense+1

Javier Ortega Palacios

·

Published

2023-11-01

·

Updated

2024-11-26

·

CVE-2023-20048

CVSS v3.1

9.9

Critical

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H
Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center (FMC) Software (affected versions not specified)
Description A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute certain unauthorized configuration commands on a Firepower Threat Defense (FTD) device that is managed by the FMC Software. This vulnerability is due to insufficient authorization of configuration commands that are sent through the web service interface. An attacker could exploit this vulnerability by authenticating to the FMC web services interface and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute certain configuration commands on the targeted FTD device. To successfully exploit this vulnerability, an attacker would need valid credentials on the FMC Software.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Authorization

Improper Authorization

Improper Privilege Management

Weakness Enumeration

CWE-863CWE-285CWE-269

Related Identifiers

BDU:2023-07476
CVE-2023-20048

Affected Products

Cisco Firepower Management Center
Firepower Threat Defense