Secure Firewall Management Center vulnerabilities
18 known vulnerabilities in Secure Firewall Management Center from Cisco. 17 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 5.3 Medium severity
Cisco Secure Firewall Management Center Use of Hard-coded Password Exploited
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.
- 10.0 Critical severity
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Exploited
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to inse
- 10.0 Critical severity
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Exploited
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying opera
- 8.1 High severity
Cisco Secure Firewall Management Center (FMC): Improper Neutralization of Special Elements used in an SQL Command
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input.
- 10.0 Critical severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. This vulnerability is due
- 8.5 High severity
A vulnerability in the web-based management interface of Cisco Secure Firewall Management…
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to inject arbitrary HTML content into a device-generated document. This vulnerability is due to improp
- 9.9 Critical severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operat
- 7.2 High severity
Cisco Firepower Management Center: Improper Privilege Management
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitra
- 8.8 High severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based mana
- 8.8 High severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements used in a Command
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. To exploit these vulnerabilities,
- 8.8 High severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements used in a Command
Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The attacker would need valid device cr
- 8.2 High severity
A vulnerability in the inter-device communication mechanisms between devices that are running…
A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devices that are running Cisco Firepower Management (FMC) Software could allow an authenticated, local attacker to e
- 9.9 Critical severity
Cisco Firepower Management Center: Incorrect Authorization
A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute certain unauthorized configuration commands on a Firepower Threat Defense (FTD) device that is managed by
- 8.8 High severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The vulnerability is due to insufficient val
- 7.2 High severity
Cisco Firepower Management Center: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The vulnerability is due to insufficient val
- 7.5 High severity
Cisco Firepower Management Center: Improper Authentication
A vulnerability in the Simple Network Management Protocol (SNMP) access controls for Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module, Cisco Firepower Management Center (FMC) Software, and Cisco Next-Generation Intrusion Preventi
- 7.5 High severity
Cisco Firepower Management Center: Improper Handling of Exceptional Conditions
A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device
- 8.8 High severity
Cisco Firepower Management Center: Unrestricted Upload of File with Dangerous Type
A vulnerability in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to bypass security protections and upload malicious files to the affected system. This vulnerability is due to imp