CVE-2024-20374 - Vulnerability Details

Vendors	Products
Cisco	Firepower Management Center Secure Firewall Management Center

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-2HBkA97G

Type	Values Removed	Values Added
First Time appeared		Cisco secure Firewall Management Center
CPEs		cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0.2:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0.3:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.0.3:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.0.4:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.0.5:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.2:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.2:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.3:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.2:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.2:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.6:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.7:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.3.0:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.2:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.4.0:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1.1:::::::* cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1:::::::*
Vendors & Products		Cisco secure Firewall Management Center

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco firepower Management Center
CPEs		cpe:2.3:a:cisco:firepower_management_center::::::::
Vendors & Products		Cisco Cisco firepower Management Center
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary commands on the underlying operating system. This vulnerability is due to insufficient input validation of certain HTTP request parameters that are sent to the web-based management interface. An attacker could exploit this vulnerability by authenticating to the Cisco FMC web-based management interface and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute commands as the root user on the affected device. To exploit this vulnerability, an attacker would need Administrator-level credentials.
Weaknesses		CWE-269
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-2HBkA97G
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-20374", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2023-11-08T15:08:07.654Z", "datePublished": "2024-10-23T17:30:06.650Z", "dateUpdated": "2024-10-26T03:55:32.499Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-10-23T17:30:06.650Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary commands on the underlying operating system.\r\n\r This vulnerability is due to insufficient input validation of certain HTTP request parameters that are sent to the web-based management interface. An attacker could exploit this vulnerability by authenticating to the Cisco FMC web-based management interface and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute commands as the root user on the affected device. To exploit this vulnerability, an attacker would need Administrator-level credentials."}], "affected": [{"vendor": "Cisco", "product": "Cisco Firepower Management Center", "versions": [{"version": "6.7.0", "status": "affected"}, {"version": "6.7.0.1", "status": "affected"}, {"version": "6.7.0.2", "status": "affected"}, {"version": "6.7.0.3", "status": "affected"}, {"version": "7.0.0", "status": "affected"}, {"version": "7.0.0.1", "status": "affected"}, {"version": "7.0.1", "status": "affected"}, {"version": "7.0.1.1", "status": "affected"}, {"version": "7.0.2", "status": "affected"}, {"version": "7.0.2.1", "status": "affected"}, {"version": "7.0.3", "status": "affected"}, {"version": "7.0.4", "status": "affected"}, {"version": "7.0.5", "status": "affected"}, {"version": "7.0.6", "status": "affected"}, {"version": "7.0.6.1", "status": "affected"}, {"version": "7.0.6.2", "status": "affected"}, {"version": "7.1.0", "status": "affected"}, {"version": "7.1.0.1", "status": "affected"}, {"version": "7.1.0.2", "status": "affected"}, {"version": "7.1.0.3", "status": "affected"}, {"version": "7.2.0", "status": "affected"}, {"version": "7.2.1", "status": "affected"}, {"version": "7.2.2", "status": "affected"}, {"version": "7.2.0.1", "status": "affected"}, {"version": "7.2.3", "status": "affected"}, {"version": "7.2.3.1", "status": "affected"}, {"version": "7.2.4", "status": "affected"}, {"version": "7.2.4.1", "status": "affected"}, {"version": "7.2.5", "status": "affected"}, {"version": "7.2.5.1", "status": "affected"}, {"version": "7.2.6", "status": "affected"}, {"version": "7.2.7", "status": "affected"}, {"version": "7.2.5.2", "status": "affected"}, {"version": "7.2.8", "status": "affected"}, {"version": "7.2.8.1", "status": "affected"}, {"version": "7.3.0", "status": "affected"}, {"version": "7.3.1", "status": "affected"}, {"version": "7.3.1.1", "status": "affected"}, {"version": "7.3.1.2", "status": "affected"}, {"version": "7.4.0", "status": "affected"}, {"version": "7.4.1", "status": "affected"}, {"version": "7.4.1.1", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Privilege Management", "type": "cwe", "cweId": "CWE-269"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-2HBkA97G", "name": "cisco-sa-fmc-cmd-inj-2HBkA97G"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE"}}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "source": {"advisory": "cisco-sa-fmc-cmd-inj-2HBkA97G", "discovery": "EXTERNAL", "defects": ["CSCwi78588"]}}, "adp": [{"affected": [{"vendor": "cisco", "product": "firepower_management_center", "cpes": ["cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "6.7.0", "status": "affected", "lessThanOrEqual": "6.7.0.3", "versionType": "custom"}, {"version": "7.0.0", "status": "affected", "lessThanOrEqual": "7.0.6.2", "versionType": "custom"}, {"version": "7.1.0", "status": "affected", "lessThanOrEqual": "7.1.0.3", "versionType": "custom"}, {"version": "7.2.0", "status": "affected", "lessThanOrEqual": "7.2.8.1", "versionType": "custom"}, {"version": "7.3.0", "status": "affected", "lessThanOrEqual": "7.3.1.2", "versionType": "custom"}, {"version": "7.4.0", "status": "affected", "lessThanOrEqual": "7.4.1.1", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-25T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2024-20374"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-26T03:55:32.499Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-20374 (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

state : PUBLISHED (string)

assignerShortName : cisco (string)

dateReserved : 2023-11-08T15:08:07.654Z (string)

datePublished : 2024-10-23T17:30:06.650Z (string)

dateUpdated : 2024-10-26T03:55:32.499Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2024-10-23T17:30:06.650Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary commands on the underlying operating system. This vulnerability is due to insufficient input validation of certain HTTP request parameters that are sent to the web-based management interface. An attacker could exploit this vulnerability by authenticating to the Cisco FMC web-based management interface and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute commands as the root user on the affected device. To exploit this vulnerability, an attacker would need Administrator-level credentials. (string)

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco Firepower Management Center (string)

versions : [ »

0 : { »

version : 6.7.0 (string)

status : affected (string)

}

1 : { »

version : 6.7.0.1 (string)

status : affected (string)

}

2 : { »

version : 6.7.0.2 (string)

status : affected (string)

}

3 : { »

version : 6.7.0.3 (string)

status : affected (string)

}

4 : { »

version : 7.0.0 (string)

status : affected (string)

}

5 : { »

version : 7.0.0.1 (string)

status : affected (string)

}

6 : { »

version : 7.0.1 (string)

status : affected (string)

}

7 : { »

version : 7.0.1.1 (string)

status : affected (string)

}

8 : { »

version : 7.0.2 (string)

status : affected (string)

}

9 : { »

version : 7.0.2.1 (string)

status : affected (string)

}

10 : { »

version : 7.0.3 (string)

status : affected (string)

}

11 : { »

version : 7.0.4 (string)

status : affected (string)

}

12 : { »

version : 7.0.5 (string)

status : affected (string)

}

13 : { »

version : 7.0.6 (string)

status : affected (string)

}

14 : { »

version : 7.0.6.1 (string)

status : affected (string)

}

15 : { »

version : 7.0.6.2 (string)

status : affected (string)

}

16 : { »

version : 7.1.0 (string)

status : affected (string)

}

17 : { »

version : 7.1.0.1 (string)

status : affected (string)

}

18 : { »

version : 7.1.0.2 (string)

status : affected (string)

}

19 : { »

version : 7.1.0.3 (string)

status : affected (string)

}

20 : { »

version : 7.2.0 (string)

status : affected (string)

}

21 : { »

version : 7.2.1 (string)

status : affected (string)

}

22 : { »

version : 7.2.2 (string)

status : affected (string)

}

23 : { »

version : 7.2.0.1 (string)

status : affected (string)

}

24 : { »

version : 7.2.3 (string)

status : affected (string)

}

25 : { »

version : 7.2.3.1 (string)

status : affected (string)

}

26 : { »

version : 7.2.4 (string)

status : affected (string)

}

27 : { »

version : 7.2.4.1 (string)

status : affected (string)

}

28 : { »

version : 7.2.5 (string)

status : affected (string)

}

29 : { »

version : 7.2.5.1 (string)

status : affected (string)

}

30 : { »

version : 7.2.6 (string)

status : affected (string)

}

31 : { »

version : 7.2.7 (string)

status : affected (string)

}

32 : { »

version : 7.2.5.2 (string)

status : affected (string)

}

33 : { »

version : 7.2.8 (string)

status : affected (string)

}

34 : { »

version : 7.2.8.1 (string)

status : affected (string)

}

35 : { »

version : 7.3.0 (string)

status : affected (string)

}

36 : { »

version : 7.3.1 (string)

status : affected (string)

}

37 : { »

version : 7.3.1.1 (string)

status : affected (string)

}

38 : { »

version : 7.3.1.2 (string)

status : affected (string)

}

39 : { »

version : 7.4.0 (string)

status : affected (string)

}

40 : { »

version : 7.4.1 (string)

status : affected (string)

}

41 : { »

version : 7.4.1.1 (string)

status : affected (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : Improper Privilege Management (string)

type : cwe (string)

cweId : CWE-269 (string)

}

]

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-2HBkA97G (string)

name : cisco-sa-fmc-cmd-inj-2HBkA97G (string)

}

]

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

attackVector : NETWORK (string)

attackComplexity : LOW (string)

privilegesRequired : HIGH (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

availabilityImpact : NONE (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory. (string)

}

]

source : { »

advisory : cisco-sa-fmc-cmd-inj-2HBkA97G (string)

discovery : EXTERNAL (string)

defects : [ »

0 : CSCwi78588 (string)

]

}

adp : [ »

0 : { »

affected : [ »

0 : { »

vendor : cisco (string)

product : firepower_management_center (string)

cpes : [ »

0 : cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 6.7.0 (string)

status : affected (string)

lessThanOrEqual : 6.7.0.3 (string)

versionType : custom (string)

}

1 : { »

version : 7.0.0 (string)

status : affected (string)

lessThanOrEqual : 7.0.6.2 (string)

versionType : custom (string)

}

2 : { »

version : 7.1.0 (string)

status : affected (string)

lessThanOrEqual : 7.1.0.3 (string)

versionType : custom (string)

}

3 : { »

version : 7.2.0 (string)

status : affected (string)

lessThanOrEqual : 7.2.8.1 (string)

versionType : custom (string)

}

4 : { »

version : 7.3.0 (string)

status : affected (string)

lessThanOrEqual : 7.3.1.2 (string)

versionType : custom (string)

}

5 : { »

version : 7.4.0 (string)

status : affected (string)

lessThanOrEqual : 7.4.1.1 (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-10-25T00:00:00+00:00 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

id : CVE-2024-20374 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-26T03:55:32.499Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-20374", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-10-23T18:41:14.309543Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "firepower_management_center", "versions": [{"status": "affected", "version": "6.7.0", "versionType": "custom", "lessThanOrEqual": "6.7.0.3"}, {"status": "affected", "version": "7.0.0", "versionType": "custom", "lessThanOrEqual": "7.0.6.2"}, {"status": "affected", "version": "7.1.0", "versionType": "custom", "lessThanOrEqual": "7.1.0.3"}, {"status": "affected", "version": "7.2.0", "versionType": "custom", "lessThanOrEqual": "7.2.8.1"}, {"status": "affected", "version": "7.3.0", "versionType": "custom", "lessThanOrEqual": "7.3.1.2"}, {"status": "affected", "version": "7.4.0", "versionType": "custom", "lessThanOrEqual": "7.4.1.1"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-24T17:30:28.405Z"}}], "cna": {"source": {"defects": ["CSCwi78588"], "advisory": "cisco-sa-fmc-cmd-inj-2HBkA97G", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Firepower Management Center", "versions": [{"status": "affected", "version": "6.7.0"}, {"status": "affected", "version": "6.7.0.1"}, {"status": "affected", "version": "6.7.0.2"}, {"status": "affected", "version": "6.7.0.3"}, {"status": "affected", "version": "7.0.0"}, {"status": "affected", "version": "7.0.0.1"}, {"status": "affected", "version": "7.0.1"}, {"status": "affected", "version": "7.0.1.1"}, {"status": "affected", "version": "7.0.2"}, {"status": "affected", "version": "7.0.2.1"}, {"status": "affected", "version": "7.0.3"}, {"status": "affected", "version": "7.0.4"}, {"status": "affected", "version": "7.0.5"}, {"status": "affected", "version": "7.0.6"}, {"status": "affected", "version": "7.0.6.1"}, {"status": "affected", "version": "7.0.6.2"}, {"status": "affected", "version": "7.1.0"}, {"status": "affected", "version": "7.1.0.1"}, {"status": "affected", "version": "7.1.0.2"}, {"status": "affected", "version": "7.1.0.3"}, {"status": "affected", "version": "7.2.0"}, {"status": "affected", "version": "7.2.1"}, {"status": "affected", "version": "7.2.2"}, {"status": "affected", "version": "7.2.0.1"}, {"status": "affected", "version": "7.2.3"}, {"status": "affected", "version": "7.2.3.1"}, {"status": "affected", "version": "7.2.4"}, {"status": "affected", "version": "7.2.4.1"}, {"status": "affected", "version": "7.2.5"}, {"status": "affected", "version": "7.2.5.1"}, {"status": "affected", "version": "7.2.6"}, {"status": "affected", "version": "7.2.7"}, {"status": "affected", "version": "7.2.5.2"}, {"status": "affected", "version": "7.2.8"}, {"status": "affected", "version": "7.2.8.1"}, {"status": "affected", "version": "7.3.0"}, {"status": "affected", "version": "7.3.1"}, {"status": "affected", "version": "7.3.1.1"}, {"status": "affected", "version": "7.3.1.2"}, {"status": "affected", "version": "7.4.0"}, {"status": "affected", "version": "7.4.1"}, {"status": "affected", "version": "7.4.1.1"}]}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-2HBkA97G", "name": "cisco-sa-fmc-cmd-inj-2HBkA97G"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary commands on the underlying operating system.\r\n\r This vulnerability is due to insufficient input validation of certain HTTP request parameters that are sent to the web-based management interface. An attacker could exploit this vulnerability by authenticating to the Cisco FMC web-based management interface and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute commands as the root user on the affected device. To exploit this vulnerability, an attacker would need Administrator-level credentials."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-269", "description": "Improper Privilege Management"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-10-23T17:30:06.650Z"}}}, "cveMetadata": {"cveId": "CVE-2024-20374", "state": "PUBLISHED", "dateUpdated": "2024-10-26T03:55:32.499Z", "dateReserved": "2023-11-08T15:08:07.654Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2024-10-23T17:30:06.650Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-20374 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-10-23T18:41:14.309543Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:firepower_management_center:*:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : firepower_management_center (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.7.0 (string)

versionType : custom (string)

lessThanOrEqual : 6.7.0.3 (string)

}

1 : { »

status : affected (string)

version : 7.0.0 (string)

versionType : custom (string)

lessThanOrEqual : 7.0.6.2 (string)

}

2 : { »

status : affected (string)

version : 7.1.0 (string)

versionType : custom (string)

lessThanOrEqual : 7.1.0.3 (string)

}

3 : { »

status : affected (string)

version : 7.2.0 (string)

versionType : custom (string)

lessThanOrEqual : 7.2.8.1 (string)

}

4 : { »

status : affected (string)

version : 7.3.0 (string)

versionType : custom (string)

lessThanOrEqual : 7.3.1.2 (string)

}

5 : { »

status : affected (string)

version : 7.4.0 (string)

versionType : custom (string)

lessThanOrEqual : 7.4.1.1 (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-24T17:30:28.405Z (string)

}

]

cna : { »

source : { »

defects : [ »

0 : CSCwi78588 (string)

]

advisory : cisco-sa-fmc-cmd-inj-2HBkA97G (string)

discovery : EXTERNAL (string)

}

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.5 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : HIGH (string)

confidentialityImpact : HIGH (string)

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco Firepower Management Center (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.7.0 (string)

}

1 : { »

status : affected (string)

version : 6.7.0.1 (string)

}

2 : { »

status : affected (string)

version : 6.7.0.2 (string)

}

3 : { »

status : affected (string)

version : 6.7.0.3 (string)

}

4 : { »

status : affected (string)

version : 7.0.0 (string)

}

5 : { »

status : affected (string)

version : 7.0.0.1 (string)

}

6 : { »

status : affected (string)

version : 7.0.1 (string)

}

7 : { »

status : affected (string)

version : 7.0.1.1 (string)

}

8 : { »

status : affected (string)

version : 7.0.2 (string)

}

9 : { »

status : affected (string)

version : 7.0.2.1 (string)

}

10 : { »

status : affected (string)

version : 7.0.3 (string)

}

11 : { »

status : affected (string)

version : 7.0.4 (string)

}

12 : { »

status : affected (string)

version : 7.0.5 (string)

}

13 : { »

status : affected (string)

version : 7.0.6 (string)

}

14 : { »

status : affected (string)

version : 7.0.6.1 (string)

}

15 : { »

status : affected (string)

version : 7.0.6.2 (string)

}

16 : { »

status : affected (string)

version : 7.1.0 (string)

}

17 : { »

status : affected (string)

version : 7.1.0.1 (string)

}

18 : { »

status : affected (string)

version : 7.1.0.2 (string)

}

19 : { »

status : affected (string)

version : 7.1.0.3 (string)

}

20 : { »

status : affected (string)

version : 7.2.0 (string)

}

21 : { »

status : affected (string)

version : 7.2.1 (string)

}

22 : { »

status : affected (string)

version : 7.2.2 (string)

}

23 : { »

status : affected (string)

version : 7.2.0.1 (string)

}

24 : { »

status : affected (string)

version : 7.2.3 (string)

}

25 : { »

status : affected (string)

version : 7.2.3.1 (string)

}

26 : { »

status : affected (string)

version : 7.2.4 (string)

}

27 : { »

status : affected (string)

version : 7.2.4.1 (string)

}

28 : { »

status : affected (string)

version : 7.2.5 (string)

}

29 : { »

status : affected (string)

version : 7.2.5.1 (string)

}

30 : { »

status : affected (string)

version : 7.2.6 (string)

}

31 : { »

status : affected (string)

version : 7.2.7 (string)

}

32 : { »

status : affected (string)

version : 7.2.5.2 (string)

}

33 : { »

status : affected (string)

version : 7.2.8 (string)

}

34 : { »

status : affected (string)

version : 7.2.8.1 (string)

}

35 : { »

status : affected (string)

version : 7.3.0 (string)

}

36 : { »

status : affected (string)

version : 7.3.1 (string)

}

37 : { »

status : affected (string)

version : 7.3.1.1 (string)

}

38 : { »

status : affected (string)

version : 7.3.1.2 (string)

}

39 : { »

status : affected (string)

version : 7.4.0 (string)

}

40 : { »

status : affected (string)

version : 7.4.1 (string)

}

41 : { »

status : affected (string)

version : 7.4.1.1 (string)

}

]

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory. (string)

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-2HBkA97G (string)

name : cisco-sa-fmc-cmd-inj-2HBkA97G (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary commands on the underlying operating system. This vulnerability is due to insufficient input validation of certain HTTP request parameters that are sent to the web-based management interface. An attacker could exploit this vulnerability by authenticating to the Cisco FMC web-based management interface and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute commands as the root user on the affected device. To exploit this vulnerability, an attacker would need Administrator-level credentials. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : cwe (string)

cweId : CWE-269 (string)

description : Improper Privilege Management (string)

}

]

}

]

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2024-10-23T17:30:06.650Z (string)

}

cveMetadata : { »

cveId : CVE-2024-20374 (string)

state : PUBLISHED (string)

dateUpdated : 2024-10-26T03:55:32.499Z (string)

dateReserved : 2023-11-08T15:08:07.654Z (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

datePublished : 2024-10-23T17:30:06.650Z (string)

assignerShortName : cisco (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "978284EE-8BE8-43ED-ADA0-B90151D83EA5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "0BA140F9-4706-4B05-826E-962A277E625A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "5E7D3C93-B0FC-475E-9CCA-AA8A2101781D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "270CA092-1AF1-48D4-8695-E7DB694969C5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "DFA94312-376E-4785-888F-3C07612E1DF7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "29E73FBF-2579-4660-AFFA-7F9607004226", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "87FAAFFB-0589-441B-8289-8B8A6E18F705", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "73B92119-793D-4A43-A056-24DB6826E759", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "093A0BC2-037C-463F-AFC5-EF11C2954EAD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "C4F434FC-CAA4-4DBB-8094-C4ECC28B31E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "68C70BB3-33B3-4E7E-99D5-FF76D4ED96AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "B881B8DF-A96D-4B64-B98A-71F0D3388641", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "F6A97625-D39C-42D5-89E4-415A868A0972", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "5E4D83B4-9697-4071-AC9F-7ADC86A6B529", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "8F81F708-ACED-4E42-8CA9-116B5C4F5141", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "3C86116B-8475-40A0-A507-D4A7947F5F2C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "A58A2DA5-3EE7-408D-AAFA-82330F0325B2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "7FA98EEC-2059-4CA9-92F1-72C1E0BB7EC6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "F4C51EE7-866B-410C-B75E-EF260D5062B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "5F1FFD07-B874-4D3C-8E2C-9A204F1E994E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "FB5ACB9E-86AF-4EC1-9F36-A202429CD0F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "AD1E4527-AAE2-4DA9-AFDA-6375839F7843", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "2F0AF047-EAE9-4C77-BCEF-5CB26F84C742", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "2ED03874-4071-4382-8A46-8B3A59E601FF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "BF84E043-DF3C-4A95-8FDA-B0FDCD795377", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "B9498087-9642-4A86-B3EE-1513C55A86E2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "36C229AB-2851-48D4-815A-63AAB4462A24", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "6DA4BCFC-8237-4F5C-9863-523EE7D8619B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "07693A92-7D84-45A1-ACD6-D83AE41D504B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "2C78050A-A5FB-427B-BF0D-0353B240A4FF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "85E76AE7-12AC-4419-AE66-43730B173B4E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "4D803EC9-26EE-4799-A435-C782C92739CF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "6EEF87CD-2335-4886-A65C-4E33775AEC52", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "953EB81A-1B53-4A57-9F59-D4A7D37E657E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "1CB534BC-3E4D-4484-AFD0-69524B1F07F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "5D401072-6709-4921-8918-720F28D61E24", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "C0EA3467-4205-4C41-AF24-689330F7396B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "9BE94E38-5F29-4AE1-8129-7F7582C2CC75", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "FEF603AD-D69B-4DD8-A7F4-6BEFD355EF29", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "D6BD1665-7824-4D98-A930-432CBDA4EAD5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "F8056E69-22FA-4935-A576-916805D90C62", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "6A80BBBE-DB5E-460A-8621-6E28D2BD6E44", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary commands on the underlying operating system.\r\n\r This vulnerability is due to insufficient input validation of certain HTTP request parameters that are sent to the web-based management interface. An attacker could exploit this vulnerability by authenticating to the Cisco FMC web-based management interface and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute commands as the root user on the affected device. To exploit this vulnerability, an attacker would need Administrator-level credentials."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web del software Cisco Secure Firewall Management Center (FMC), anteriormente Firepower Management Center Software, podr\u00eda permitir que un atacante remoto autenticado con privilegios de nivel de administrador ejecute comandos arbitrarios en el sistema operativo subyacente. Esta vulnerabilidad se debe a una validaci\u00f3n de entrada insuficiente de ciertos par\u00e1metros de solicitud HTTP que se env\u00edan a la interfaz de administraci\u00f3n basada en web. Un atacante podr\u00eda aprovechar esta vulnerabilidad autentic\u00e1ndose en la interfaz de administraci\u00f3n basada en web de Cisco FMC y enviando una solicitud HTTP manipulada a un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante ejecutar comandos como usuario ra\u00edz en el dispositivo afectado. Para aprovechar esta vulnerabilidad, un atacante necesitar\u00eda credenciales de nivel de administrador."}], "id": "CVE-2024-20374", "lastModified": "2025-08-06T15:20:36.897", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.2, "source": "psirt@cisco.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-10-23T18:15:06.100", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-2HBkA97G"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 978284EE-8BE8-43ED-ADA0-B90151D83EA5 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 0BA140F9-4706-4B05-826E-962A277E625A (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 5E7D3C93-B0FC-475E-9CCA-AA8A2101781D (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 270CA092-1AF1-48D4-8695-E7DB694969C5 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : DFA94312-376E-4785-888F-3C07612E1DF7 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 29E73FBF-2579-4660-AFFA-7F9607004226 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 87FAAFFB-0589-441B-8289-8B8A6E18F705 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 73B92119-793D-4A43-A056-24DB6826E759 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 093A0BC2-037C-463F-AFC5-EF11C2954EAD (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : C4F434FC-CAA4-4DBB-8094-C4ECC28B31E7 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.0.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 68C70BB3-33B3-4E7E-99D5-FF76D4ED96AE (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.0.4:*:*:*:*:*:*:* (string)

matchCriteriaId : B881B8DF-A96D-4B64-B98A-71F0D3388641 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.0.5:*:*:*:*:*:*:* (string)

matchCriteriaId : F6A97625-D39C-42D5-89E4-415A868A0972 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 5E4D83B4-9697-4071-AC9F-7ADC86A6B529 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 8F81F708-ACED-4E42-8CA9-116B5C4F5141 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 3C86116B-8475-40A0-A507-D4A7947F5F2C (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : A58A2DA5-3EE7-408D-AAFA-82330F0325B2 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 7FA98EEC-2059-4CA9-92F1-72C1E0BB7EC6 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : F4C51EE7-866B-410C-B75E-EF260D5062B0 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 5F1FFD07-B874-4D3C-8E2C-9A204F1E994E (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0:*:*:*:*:*:*:* (string)

matchCriteriaId : FB5ACB9E-86AF-4EC1-9F36-A202429CD0F4 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : AD1E4527-AAE2-4DA9-AFDA-6375839F7843 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 2F0AF047-EAE9-4C77-BCEF-5CB26F84C742 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 2ED03874-4071-4382-8A46-8B3A59E601FF (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3:*:*:*:*:*:*:* (string)

matchCriteriaId : BF84E043-DF3C-4A95-8FDA-B0FDCD795377 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3.1:*:*:*:*:*:*:* (string)

matchCriteriaId : B9498087-9642-4A86-B3EE-1513C55A86E2 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 36C229AB-2851-48D4-815A-63AAB4462A24 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 6DA4BCFC-8237-4F5C-9863-523EE7D8619B (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 07693A92-7D84-45A1-ACD6-D83AE41D504B (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 2C78050A-A5FB-427B-BF0D-0353B240A4FF (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 85E76AE7-12AC-4419-AE66-43730B173B4E (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 4D803EC9-26EE-4799-A435-C782C92739CF (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.7:*:*:*:*:*:*:* (string)

matchCriteriaId : 6EEF87CD-2335-4886-A65C-4E33775AEC52 (string)

vulnerable : true (boolean)

}

33 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8:*:*:*:*:*:*:* (string)

matchCriteriaId : 953EB81A-1B53-4A57-9F59-D4A7D37E657E (string)

vulnerable : true (boolean)

}

34 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.2.8.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 1CB534BC-3E4D-4484-AFD0-69524B1F07F9 (string)

vulnerable : true (boolean)

}

35 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.3.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 5D401072-6709-4921-8918-720F28D61E24 (string)

vulnerable : true (boolean)

}

36 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1:*:*:*:*:*:*:* (string)

matchCriteriaId : C0EA3467-4205-4C41-AF24-689330F7396B (string)

vulnerable : true (boolean)

}

37 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 9BE94E38-5F29-4AE1-8129-7F7582C2CC75 (string)

vulnerable : true (boolean)

}

38 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : FEF603AD-D69B-4DD8-A7F4-6BEFD355EF29 (string)

vulnerable : true (boolean)

}

39 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : D6BD1665-7824-4D98-A930-432CBDA4EAD5 (string)

vulnerable : true (boolean)

}

40 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : F8056E69-22FA-4935-A576-916805D90C62 (string)

vulnerable : true (boolean)

}

41 : { »

criteria : cpe:2.3:a:cisco:secure_firewall_management_center:7.4.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 6A80BBBE-DB5E-460A-8621-6E28D2BD6E44 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary commands on the underlying operating system. This vulnerability is due to insufficient input validation of certain HTTP request parameters that are sent to the web-based management interface. An attacker could exploit this vulnerability by authenticating to the Cisco FMC web-based management interface and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute commands as the root user on the affected device. To exploit this vulnerability, an attacker would need Administrator-level credentials. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad en la interfaz de administración basada en web del software Cisco Secure Firewall Management Center (FMC), anteriormente Firepower Management Center Software, podría permitir que un atacante remoto autenticado con privilegios de nivel de administrador ejecute comandos arbitrarios en el sistema operativo subyacente. Esta vulnerabilidad se debe a una validación de entrada insuficiente de ciertos parámetros de solicitud HTTP que se envían a la interfaz de administración basada en web. Un atacante podría aprovechar esta vulnerabilidad autenticándose en la interfaz de administración basada en web de Cisco FMC y enviando una solicitud HTTP manipulada a un dispositivo afectado. Una explotación exitosa podría permitir al atacante ejecutar comandos como usuario raíz en el dispositivo afectado. Para aprovechar esta vulnerabilidad, un atacante necesitaría credenciales de nivel de administrador. (string)

}

]

id : CVE-2024-20374 (string)

lastModified : 2025-08-06T15:20:36.897 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 1.2 (number)

impactScore : 5.2 (number)

source : psirt@cisco.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.2 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.2 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2024-10-23T18:15:06.100 (string)

references : [ »

0 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-2HBkA97G (string)

}

]

sourceIdentifier : psirt@cisco.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-269 (string)

}

]

source : psirt@cisco.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object