PT-2024-7254 · Cisco · Cisco Secure Firewall Management Center+1

Published 2024-10-23 · Updated 2024-11-01 · CVE-2024-20424

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Management Center (FMC) Software versions (affected versions not specified)

Description The issue is related to insufficient input validation of certain HTTP requests in the web-based management interface. This could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system as root. The attacker would need valid credentials for a user account with at least the role of Security Analyst (Read Only) to exploit this vulnerability. By sending a crafted HTTP request to the device after authenticating to the web-based management interface, a successful exploit could allow the attacker to execute arbitrary commands with root permissions on the underlying operating system of the Cisco FMC device or to execute commands on managed Cisco Firepower Threat Defense (FTD) devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2024-08598

CVE-2024-20424

Affected Products

Cisco Ftd

Cisco Secure Firewall Management Center

References · 7

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-v3AWDqN7 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-20424 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20424 · Security Note
• https://bdu.fstec.ru/vul/2024-08598 · Security Note
• https://t.me/pentestingnews/52609 · Telegram Post
• https://t.me/true_secator/6358 · Telegram Post
• https://t.me/cvedetector/8760 · Telegram Post