6.8средняя

BDU:2024-11140

Опубликовано: 2024-12-16

Уязвимость веб-интерфейса управления программного обеспечения администрирования сети Cisco Secure Firewall Management Center (ранее Cisco Firepower Management Center) связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный SQL-код

Cisco Firepower Management Center (7.0.0)Cisco Firepower Management Center (7.0.0.1)Cisco Firepower Management Center (7.0.1)Cisco Firepower Management Center (7.0.1.1)Cisco Firepower Management Center (7.0.2)Cisco Firepower Management Center (7.0.2.1)Cisco Firepower Management Center (7.0.3)Cisco Firepower Management Center (7.0.4)Cisco Firepower Management Center (7.2.0)Cisco Firepower Management Center (7.2.1)Cisco Firepower Management Center (7.0.5)Cisco Firepower Management Center (7.1.0)Cisco Firepower Management Center (7.1.0.1)Cisco Firepower Management Center (7.1.0.2)Cisco Firepower Management Center (7.1.0.3)Cisco Firepower Management Center (7.2.2)Cisco Firepower Management Center (7.2.0.1)Cisco Firepower Management Center (7.2.3)Cisco Firepower Management Center (7.2.3.1)Cisco Firepower Management Center (7.3.0)Cisco Firepower Management Center (7.3.1)Cisco Firepower Management Center (7.3.1.1)Cisco Firepower Management Center (7.0.6)Cisco Firepower Management Center (7.2.4.1)Cisco Firepower Management Center (7.3.1.2)Cisco Firepower Management Center (7.2.4)Cisco Firepower Management Center (7.2.5)Cisco Firepower Management Center (7.4.0)Cisco Firepower Management Center (7.4.1)Cisco Firepower Management Center (7.4.1.1)

Использование рекомендаций производителя:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-inject-2EnmTC8v