8.5высокая

BDU:2024-08856

Опубликовано: 2024-10-31

Уязвимость веб-интерфейса управления программного обеспечения администрирования сети Cisco Secure Firewall Management Center (ранее Cisco Firepower Management Center) связана с непринятием мер по защите структуры SQL-запроса. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код

Cisco Secure Firewall Management Center (06.02.2003)Cisco Secure Firewall Management Center (6.2.3.1)Cisco Secure Firewall Management Center (6.2.3.2)Cisco Secure Firewall Management Center (6.2.3.3)Cisco Secure Firewall Management Center (6.2.3.4)Cisco Secure Firewall Management Center (6.2.3.5)Cisco Secure Firewall Management Center (6.2.3.6)Cisco Secure Firewall Management Center (6.2.3.7)Cisco Secure Firewall Management Center (6.2.3.9)Cisco Secure Firewall Management Center (6.2.3.10)Cisco Secure Firewall Management Center (6.2.3.11)Cisco Secure Firewall Management Center (6.2.3.12)Cisco Secure Firewall Management Center (6.2.3.13)Cisco Secure Firewall Management Center (6.2.3.14)Cisco Secure Firewall Management Center (6.2.3.15)Cisco Secure Firewall Management Center (6.2.3.8)Cisco Secure Firewall Management Center (6.2.3.16)Cisco Secure Firewall Management Center (6.2.3.17)Cisco Secure Firewall Management Center (6.2.3.18)Cisco Secure Firewall Management Center (06.04.2000)Cisco Secure Firewall Management Center (6.4.0.1)Cisco Secure Firewall Management Center (6.4.0.3)Cisco Secure Firewall Management Center (6.4.0.2)Cisco Secure Firewall Management Center (6.4.0.4)Cisco Secure Firewall Management Center (6.4.0.5)Cisco Secure Firewall Management Center (6.4.0.6)Cisco Secure Firewall Management Center (6.4.0.7)Cisco Secure Firewall Management Center (6.4.0.8)Cisco Secure Firewall Management Center (6.4.0.9)Cisco Secure Firewall Management Center (6.4.0.10)

Использование рекомендаций производителя:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inj-LOYAFcfq