Cisco Firepower Management Center vulnerabilities
14 known vulnerabilities in Cisco Firepower Management Center from Cisco. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 10.0 Critical severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. This vulnerability is due
- 8.5 High severity
A vulnerability in the web-based management interface of Cisco Secure Firewall Management…
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to inject arbitrary HTML content into a device-generated document. This vulnerability is due to improp
- 9.9 Critical severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operat
- 7.2 High severity
Cisco Firepower Management Center: Improper Privilege Management
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitra
- 8.8 High severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based mana
- 8.8 High severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements used in a Command
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. To exploit these vulnerabilities,
- 8.8 High severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements used in a Command
Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The attacker would need valid device cr
- 8.2 High severity
A vulnerability in the inter-device communication mechanisms between devices that are running…
A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devices that are running Cisco Firepower Management (FMC) Software could allow an authenticated, local attacker to e
- 9.9 Critical severity
Cisco Firepower Management Center: Incorrect Authorization
A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute certain unauthorized configuration commands on a Firepower Threat Defense (FTD) device that is managed by
- 8.8 High severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The vulnerability is due to insufficient val
- 7.2 High severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The vulnerability is due to insufficient val
- 7.5 High severity
Cisco Firepower Management Center: Improper Authentication
A vulnerability in the Simple Network Management Protocol (SNMP) access controls for Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module, Cisco Firepower Management Center (FMC) Software, and Cisco Next-Generation Intrusion Preventi
- 7.5 High severity
Cisco Firepower Management Center: Improper Handling of Exceptional Conditions
A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device
- 8.8 High severity
Cisco Firepower Management Center: Unrestricted Upload of File with Dangerous Type
A vulnerability in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to bypass security protections and upload malicious files to the affected system. This vulnerability is due to imp