جزئیات آسیبپذیری
CVE-2026-20002
Cisco Secure Firewall Management Center
CVSS 3.1
8.1بالا
شرح رسمی (انگلیسی)
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted requests to an affected device. A successful exploit could allow the attacker to obtain full access to the database and read certain files on the underlying operating system. To exploit this vulnerability, the attacker would need valid user credentials.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.1بالا | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.11 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.12 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.13 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.14 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.15 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.16 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.17 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.18 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.6.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.6.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.8.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.1.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.1.0.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.1.0.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.10.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.10.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.5.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.5.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.8.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.3.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.3.1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.7.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.7.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.7.10.1 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیبپذیریهای تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۲/۱۳
- آخرین بهروزرسانی
- ۱۴۰۴/۱۲/۱۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیشبینی بهرهبرداری (EPSS)
۰٫۳۹٪
احتمال بهرهبرداری در ۳۰ روز
۳۳٫۹٪
صدک (نسبت به همهی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- کامل
ضعفها (CWE)
- CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')