PT-2023-7129 · Cisco · Cisco Firepower Management Center

Dinesh Kumar V. K · Published 2023-10-27 · Updated 2024-11-26 · CVE-2023-20155

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center (FMC) Software (affected versions not specified)

Description The issue is related to a lack of rate-limiting of requests sent to a specific API related to an FMC log, which could allow an unauthenticated, remote attacker to cause the device to become unresponsive or trigger an unexpected reload. An attacker with valid user credentials, but not Administrator privileges, could also view a system log file that they would not normally have access to. The vulnerability can be exploited by sending a high rate of HTTP requests to the API, potentially causing a denial of service (DoS) condition due to the FMC CPU spiking to 100 percent utilization or to the device reloading.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Resource Exhaustion

RCE

Improper Resource Release

Weakness Enumeration

CWE-770

CWE-400

CWE-20

CWE-404

Related Identifiers

BDU:2023-08156

CVE-2023-20155

Affected Products

Cisco Firepower Management Center

References · 9

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-logview-dos-AYJdeX55 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20155 · Security Note
• https://osv.dev/vulnerability/CVE-2023-20155 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08156 · Security Note
• https://twitter.com/CVEnew/status/1719764849121439906 · Twitter Post
• https://t.me/cibsecurity/73351 · Telegram Post
• https://vuldb.com/ru/?id.244231 · Note
• https://cybersecurity-help.cz/vdb/SB2023110240 · Note
• https://twitter.com/VulmonFeeds/status/1719789652872143222 · Twitter Post