Cisco FMC Cluster Backup Command Injection Vulnerability (CVE-2024-20275)

Here is the key information about the vulnerability extracted from this web page screenshot: 1. Vulnerability Description: Vulnerability Name: Cisco Secure Firewall Management Center Software Cluster Backup Command Injection Vulnerability Vulnerability ID: cisco-sa-fmc-cmd-inj-g8AOKnDP CVE Number: CVE-2024-20275 CWE Number: CWE-78 CVSS Score: Base 6.1 2. Vulnerability Impact: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 3. Vulnerability Exploitation: Vulnerability Cause: Due to insufficient validation of user-supplied data provided through the web management interface. Attack Method: By sending a crafted HTTP request to the affected device. Impact: Allows an unauthorized remote attacker to execute arbitrary operating system commands. 4. Remediation Measures: Fix Released: Cisco has released software updates to address this vulnerability. Workaround: There are no workaround measures. 5. Affected Products: Vulnerable Products: At the time of publication, the affected devices were running a vulnerable version of FMC software, regardless of the device's configuration. Unaffected Products: Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software are not affected. 6. Workaround: Workaround: There are no workaround measures. 7. Fixed Software: Fixed Software: It is recommended to regularly check Cisco's security advisories for a given product to determine exposure and obtain complete upgrade solutions. 8. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 9. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 10. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 11. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 12. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 13. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 14. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 15. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 16. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 17. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 18. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 19. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 20. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 21. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 22. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 23. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 24. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 25. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 26. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 27. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 28. Affected Products: Affected Product: Cisco Secure Firewall Management Center (FMC) Software Affected Version: Final Affected Software: CSCwd08230, CSCwi47288 29. Affected Products: Affected Product: Cisc

Goal Reached Thanks to every supporter — we hit 100%!

Cisco FMC Cluster Backup Command Injection Vulnerability (CVE-2024-20275)