CVE-2022-20926
Quick assessment
Affected
Cisco Cisco Firepower Management Center
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Firepower Management Center（FMC）是美国思科（Cisco）公司的新一代防火墙管理中心软件。 Cisco Firepower Management Center（FMC）Software存在操作系统命令注入漏洞，该漏洞源于其web管理界面对用户提供的某些API端点参数验证不足允许经过身份验证的远程攻击者在底层操作系统上执行任意命令。攻击者可以通过向受影响的API端点发送精心设计的输入实现在设备上执行任意命令，且具有较低的系统权限。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-20926
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system.
The vulnerability is due to insufficient validation of user-supplied parameters for certain API endpoints. An attacker could exploit this vulnerability by sending crafted input to an affected API endpoint. A successful exploit could allow an attacker to execute arbitrary commands on the device with low system privileges. To successfully exploit this vulnerability, an attacker would need valid credentials for a user with Device permissions: by default, only Administrators, Security Approvers and Network Admins user accounts have these permissions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Firepower Management Center 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Firepower Management Center（FMC）是美国思科（Cisco）公司的新一代防火墙管理中心软件。 Cisco Firepower Management Center（FMC）Software存在操作系统命令注入漏洞，该漏洞源于其web管理界面对用户提供的某些API端点参数验证不足允许经过身份验证的远程攻击者在底层操作系统上执行任意命令。攻击者可以通过向受影响的API端点发送精心设计的输入实现在设备上执行任意命令，且具有较低的系统权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Firepower Management Center | 7.0.0 | - |
|
II. Public POCs for CVE-2022-20926
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-20926
请登录查看更多情报信息。
Vendor Advisories for CVE-2022-20926 (2)
Same Patch Batch · Cisco · 2022-11-10 · 33 CVEs total
| CVE-2022-20946 | 8.6 HIGH | Cisco Firepower Threat Defense 缓冲区错误漏洞 |
| CVE-2022-20947 | 8.6 HIGH | Cisco Adaptive Security Appliance Software和Firepower Threat Defense（FTD）Software 缓冲区错误漏洞 |
| CVE-2022-20927 | 7.7 HIGH | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliances Software 缓冲区错误漏洞 |
| CVE-2022-20924 | 7.7 HIGH | Cisco Firepower Threat Defense 输入验证错误漏洞 |
| CVE-2022-20918 | 7.5 HIGH | Cisco Firepower Management Center 授权问题漏洞 |
| CVE-2022-20854 | 7.5 HIGH | Cisco Firepower Management Center和Firepower Threat Defense 资源管理错误漏洞 |
| CVE-2022-20949 | 6.5 MEDIUM | Cisco Firepower Threat Defense 安全漏洞 |
| CVE-2022-20826 | 6.4 MEDIUM | Cisco Firepower Threat Defense 安全漏洞 |
| CVE-2022-20925 | 6.3 MEDIUM | Cisco Firepower Management Center 操作系统命令注入漏洞 |
| CVE-2022-20934 | 6.0 MEDIUM | Cisco Firepower Threat Defense和Cisco FXOS Software 操作系统操作系统命令注入漏洞 |
| CVE-2022-20950 | 5.8 MEDIUM | Cisco Firepower Threat Defense 代码问题漏洞 |
| CVE-2022-20928 | 5.8 MEDIUM | Cisco Adaptive Security Appliance（ASA）Software和Cisco Firepower Threat Defense（FTD）Software |
| CVE-2022-20922 | 5.8 MEDIUM | 多款Cisco产品安全漏洞 |
| CVE-2022-20943 | 5.8 MEDIUM | 多款Cisco产品安全漏洞 |
| CVE-2022-20940 | 5.3 MEDIUM | Cisco Firepower Threat Defense 安全漏洞 |
| CVE-2022-20941 | 5.3 MEDIUM | Cisco Firepower Management Center 安全特征问题漏洞 |
| CVE-2022-20831 | 4.8 MEDIUM | Cisco Firepower Management Center 跨站脚本漏洞 |
| CVE-2022-20832 | 4.8 MEDIUM | Cisco Firepower Management Center 跨站脚本漏洞 |
| CVE-2022-20833 | 4.8 MEDIUM | Cisco Firepower Management Center 跨站脚本漏洞 |
| CVE-2022-20834 | 4.8 MEDIUM | Cisco Firepower Management Center 跨站脚本漏洞 |
Showing top 20 of 33 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco Firepower Management Center
-
CVE-2025-20220
Cisco Secure Firewall Management Center和Cisco Secure Firewal -
CVE-2025-20306
Cisco Secure Firewall Management Center Software Command Inj -
CVE-2025-20302
Cisco Secure Firewall Management Center Software Authorizati -
CVE-2025-20301
Cisco Secure Firewall Management Center Software Authorizati -
CVE-2025-20265
Cisco Secure Firewall Management Center Software Radius Remo
Same vendor: Cisco
-
CVE-2026-76504
Cisco Catalyst SD-WAN Manager System Account Authorization B -
CVE-2026-76426
Cisco ISE REST API SQL Injection Vulnerability -
CVE-2026-20121
CIsco FTD Bypass Access List -
CVE-2026-76431
Cisco Identity Services Engine Arbitrary File Deletion Vulne -
CVE-2026-76427
Cisco ISE XML External Entity Injection Vulnerability
Same weakness: CWE-77
-
CVE-2026-102133
Kiteworks Core Arbitrary File Write through Command Injectio -
CVE-2026-102794
Ziroom ZHOME A0101 ping command injection -
CVE-2026-102793
Ziroom ZHOME A0101 set_time_zone command injection -
CVE-2026-102792
Ziroom ZHOME A0101 set_syslog command injection -
CVE-2026-102827
simple-git: unsafe-operations plugin bypass via git long-opt
V. Comments for CVE-2022-20926
No comments yet