CVE-2019-12689 - Cisco Firepower Management Center Remote Code Execution Vulnerability

Back Back to CVE browser

HIGH

Cisco Firepower Management Center Remote Code Execution Vulnerability

Published Oct 2, 2019

8.8

HIGH

CVSS 3.1

EPSS 3.12%

Description

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending malicious commands to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device.

Affected products

Vendor Cisco Product Cisco Firepower Management Center Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cisco

Cisco Firepower Management Center

n/a

Version	Status	Constraints
unspecified	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4280
Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-rce-12689
vendor-advisoryx_refsource_CISCOVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4280		Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-rce-12689		vendor-advisoryx_refsource_CISCOVendor Advisory