cnvd - cnvd-2024-41676

cnvd-2024-41676

Vulnerability from cnvd

Title: Cisco Firepower Management Center SQL注入漏洞（CNVD-2024-41676）

Description:

Cisco Firepower Management Center（FMC）是美国思科（Cisco）公司的新一代防火墙管理中心软件。

Cisco Firepower Management Center存在SQL注入漏洞，该漏洞源于基于Web的管理界面无法充分验证用户输入。远程攻击者可以利用该漏洞发送精心设计的SQL查询导致从数据库获取任何数据、在底层操作系统上执行任意命令以及将权限提升至root。

Severity: 高

Patch Name: Cisco Firepower Management Center SQL注入漏洞（CNVD-2024-41676）的补丁

Patch Description:

Cisco Firepower Management Center（FMC）是美国思科（Cisco）公司的新一代防火墙管理中心软件。

Cisco Firepower Management Center存在SQL注入漏洞，该漏洞源于基于Web的管理界面无法充分验证用户输入。远程攻击者可以利用该漏洞发送精心设计的SQL查询导致从数据库获取任何数据、在底层操作系统上执行任意命令以及将权限提升至root。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sqli-WFFDnNOs

Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-20360

Impacted products

Name
['Cisco Cisco Firepower Management Center 7.0.0', 'Cisco Cisco Firepower Management Center 7.0.0.1', 'Cisco Cisco Firepower Management Center 7.0.1', 'Cisco Cisco Firepower Management Center 7.0.1.1', 'Cisco Cisco Firepower Management Center 7.0.2', 'Cisco Cisco Firepower Management Center 7.0.2.1', 'Cisco Cisco Firepower Management Center 7.0.3', 'Cisco Cisco Firepower Management Center 7.0.4', 'Cisco Cisco Firepower Management Center 7.0.5', 'Cisco Cisco Firepower Management Center 7.0.6', 'Cisco Cisco Firepower Management Center 7.1.0', 'Cisco Cisco Firepower Management Center 7.1.0.1', 'Cisco Cisco Firepower Management Center 7.1.0.2', 'Cisco Cisco Firepower Management Center 7.1.0.3', 'Cisco Cisco Firepower Management Center 7.2.0', 'Cisco Cisco Firepower Management Center 7.2.1', 'Cisco Cisco Firepower Management Center 7.2.2', 'Cisco Cisco Firepower Management Center 7.2.0.1', 'Cisco Cisco Firepower Management Center 7.2.3', 'Cisco Cisco Firepower Management Center 7.2.3.1', 'Cisco Cisco Firepower Management Center 7.2.4', 'Cisco Cisco Firepower Management Center 7.2.4.1', 'Cisco Cisco Firepower Management Center 7.2.5', 'Cisco Cisco Firepower Management Center 7.3.0', 'Cisco Cisco Firepower Management Center 7.3.1', 'Cisco Cisco Firepower Management Center 7.3.1.1', 'Cisco Cisco Firepower Management Center 7.3.1.2']

Name

['Cisco Cisco Firepower Management Center 7.0.0', 'Cisco Cisco Firepower Management Center 7.0.0.1', 'Cisco Cisco Firepower Management Center 7.0.1', 'Cisco Cisco Firepower Management Center 7.0.1.1', 'Cisco Cisco Firepower Management Center 7.0.2', 'Cisco Cisco Firepower Management Center 7.0.2.1', 'Cisco Cisco Firepower Management Center 7.0.3', 'Cisco Cisco Firepower Management Center 7.0.4', 'Cisco Cisco Firepower Management Center 7.0.5', 'Cisco Cisco Firepower Management Center 7.0.6', 'Cisco Cisco Firepower Management Center 7.1.0', 'Cisco Cisco Firepower Management Center 7.1.0.1', 'Cisco Cisco Firepower Management Center 7.1.0.2', 'Cisco Cisco Firepower Management Center 7.1.0.3', 'Cisco Cisco Firepower Management Center 7.2.0', 'Cisco Cisco Firepower Management Center 7.2.1', 'Cisco Cisco Firepower Management Center 7.2.2', 'Cisco Cisco Firepower Management Center 7.2.0.1', 'Cisco Cisco Firepower Management Center 7.2.3', 'Cisco Cisco Firepower Management Center 7.2.3.1', 'Cisco Cisco Firepower Management Center 7.2.4', 'Cisco Cisco Firepower Management Center 7.2.4.1', 'Cisco Cisco Firepower Management Center 7.2.5', 'Cisco Cisco Firepower Management Center 7.3.0', 'Cisco Cisco Firepower Management Center 7.3.1', 'Cisco Cisco Firepower Management Center 7.3.1.1', 'Cisco Cisco Firepower Management Center 7.3.1.2']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-20360",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-20360"
    }
  },
  "description": "Cisco Firepower Management Center\uff08FMC\uff09\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u65b0\u4e00\u4ee3\u9632\u706b\u5899\u7ba1\u7406\u4e2d\u5fc3\u8f6f\u4ef6\u3002\n\nCisco Firepower Management Center\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u57fa\u4e8eWeb\u7684\u7ba1\u7406\u754c\u9762\u65e0\u6cd5\u5145\u5206\u9a8c\u8bc1\u7528\u6237\u8f93\u5165\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u8be5\u6f0f\u6d1e\u53d1\u9001\u7cbe\u5fc3\u8bbe\u8ba1\u7684SQL\u67e5\u8be2\u5bfc\u81f4\u4ece\u6570\u636e\u5e93\u83b7\u53d6\u4efb\u4f55\u6570\u636e\u3001\u5728\u5e95\u5c42\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u547d\u4ee4\u4ee5\u53ca\u5c06\u6743\u9650\u63d0\u5347\u81f3root\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sqli-WFFDnNOs",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-41676",
  "openTime": "2024-10-23",
  "patchDescription": "Cisco Firepower Management Center\uff08FMC\uff09\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u65b0\u4e00\u4ee3\u9632\u706b\u5899\u7ba1\u7406\u4e2d\u5fc3\u8f6f\u4ef6\u3002\r\n\r\nCisco Firepower Management Center\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u57fa\u4e8eWeb\u7684\u7ba1\u7406\u754c\u9762\u65e0\u6cd5\u5145\u5206\u9a8c\u8bc1\u7528\u6237\u8f93\u5165\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u8be5\u6f0f\u6d1e\u53d1\u9001\u7cbe\u5fc3\u8bbe\u8ba1\u7684SQL\u67e5\u8be2\u5bfc\u81f4\u4ece\u6570\u636e\u5e93\u83b7\u53d6\u4efb\u4f55\u6570\u636e\u3001\u5728\u5e95\u5c42\u64cd\u4f5c\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u547d\u4ee4\u4ee5\u53ca\u5c06\u6743\u9650\u63d0\u5347\u81f3root\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Firepower Management Center SQL\u6ce8\u5165\u6f0f\u6d1e\uff08CNVD-2024-41676\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Cisco Firepower Management Center 7.0.0",
      "Cisco Cisco Firepower Management Center 7.0.0.1",
      "Cisco Cisco Firepower Management Center 7.0.1",
      "Cisco Cisco Firepower Management Center 7.0.1.1",
      "Cisco Cisco Firepower Management Center 7.0.2",
      "Cisco Cisco Firepower Management Center 7.0.2.1",
      "Cisco Cisco Firepower Management Center 7.0.3",
      "Cisco Cisco Firepower Management Center 7.0.4",
      "Cisco Cisco Firepower Management Center 7.0.5",
      "Cisco Cisco Firepower Management Center 7.0.6",
      "Cisco Cisco Firepower Management Center 7.1.0",
      "Cisco Cisco Firepower Management Center 7.1.0.1",
      "Cisco Cisco Firepower Management Center 7.1.0.2",
      "Cisco Cisco Firepower Management Center 7.1.0.3",
      "Cisco Cisco Firepower Management Center 7.2.0",
      "Cisco Cisco Firepower Management Center 7.2.1",
      "Cisco Cisco Firepower Management Center 7.2.2",
      "Cisco Cisco Firepower Management Center 7.2.0.1",
      "Cisco Cisco Firepower Management Center 7.2.3",
      "Cisco Cisco Firepower Management Center 7.2.3.1",
      "Cisco Cisco Firepower Management Center 7.2.4",
      "Cisco Cisco Firepower Management Center 7.2.4.1",
      "Cisco Cisco Firepower Management Center 7.2.5",
      "Cisco Cisco Firepower Management Center 7.3.0",
      "Cisco Cisco Firepower Management Center 7.3.1",
      "Cisco Cisco Firepower Management Center 7.3.1.1",
      "Cisco Cisco Firepower Management Center 7.3.1.2"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2024-20360",
  "serverity": "\u9ad8",
  "submitTime": "2024-05-23",
  "title": "Cisco Firepower Management Center SQL\u6ce8\u5165\u6f0f\u6d1e\uff08CNVD-2024-41676\uff09"
}

CVE-2024-20360 (GCVE-0-2024-20360)

Vulnerability from cvelistv5

Published

2024-05-22 17:46

Modified

2024-08-01 21:59

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Summary

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based management interface does not adequately validate user input. An attacker could exploit this vulnerability by authenticating to the application and sending crafted SQL queries to an affected system. A successful exploit could allow the attacker to obtain any data from the database, execute arbitrary commands on the underlying operating system, and elevate privileges to root. To exploit this vulnerability, an attacker would need at least Read Only user credentials.

References

▼	URL	Tags
	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sqli-WFFDnNOs

Impacted products

	Vendor	Product	Version
	Cisco	Cisco Firepower Management Center	Version: 7.0.0 Version: 7.0.0.1 Version: 7.0.1 Version: 7.0.1.1 Version: 7.0.2 Version: 7.0.2.1 Version: 7.0.3 Version: 7.0.4 Version: 7.0.5 Version: 7.0.6 Version: 7.1.0 Version: 7.1.0.1 Version: 7.1.0.2 Version: 7.1.0.3 Version: 7.2.0 Version: 7.2.1 Version: 7.2.2 Version: 7.2.0.1 Version: 7.2.3 Version: 7.2.3.1 Version: 7.2.4 Version: 7.2.4.1 Version: 7.2.5 Version: 7.3.0 Version: 7.3.1 Version: 7.3.1.1 Version: 7.3.1.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:cisco:firepower_management_center:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "firepower_management_center",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "7.0.0"
              },
              {
                "status": "affected",
                "version": "7.0.0.1"
              },
              {
                "status": "affected",
                "version": "7.0.1"
              },
              {
                "status": "affected",
                "version": "7.0.1.1"
              },
              {
                "status": "affected",
                "version": "7.0.2"
              },
              {
                "status": "affected",
                "version": "7.0.2.1"
              },
              {
                "status": "affected",
                "version": "7.0.3"
              },
              {
                "status": "affected",
                "version": "7.0.4"
              },
              {
                "status": "affected",
                "version": "7.0.5"
              },
              {
                "status": "affected",
                "version": "7.0.6"
              },
              {
                "status": "affected",
                "version": "7.1.0"
              },
              {
                "status": "affected",
                "version": "7.1.0.1"
              },
              {
                "status": "affected",
                "version": "7.1.0.2"
              },
              {
                "status": "affected",
                "version": "7.1.0.3"
              },
              {
                "status": "affected",
                "version": "7.2.0"
              },
              {
                "status": "affected",
                "version": "7.2.1"
              },
              {
                "status": "affected",
                "version": "7.2.2"
              },
              {
                "status": "affected",
                "version": "7.2.0.1"
              },
              {
                "status": "affected",
                "version": "7.2.3"
              },
              {
                "status": "affected",
                "version": "7.2.3.1"
              },
              {
                "status": "affected",
                "version": "7.2.4"
              },
              {
                "status": "affected",
                "version": "7.2.4.1"
              },
              {
                "status": "affected",
                "version": "7.2.5"
              },
              {
                "status": "affected",
                "version": "7.3.0"
              },
              {
                "status": "affected",
                "version": "7.3.1"
              },
              {
                "status": "affected",
                "version": "7.3.1.1"
              },
              {
                "status": "affected",
                "version": "7.3.1.2"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20360",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-23T14:29:11.291846Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:40:39.489Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:59:42.328Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-fmc-sqli-WFFDnNOs",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sqli-WFFDnNOs"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Firepower Management Center",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "7.0.0"
            },
            {
              "status": "affected",
              "version": "7.0.0.1"
            },
            {
              "status": "affected",
              "version": "7.0.1"
            },
            {
              "status": "affected",
              "version": "7.0.1.1"
            },
            {
              "status": "affected",
              "version": "7.0.2"
            },
            {
              "status": "affected",
              "version": "7.0.2.1"
            },
            {
              "status": "affected",
              "version": "7.0.3"
            },
            {
              "status": "affected",
              "version": "7.0.4"
            },
            {
              "status": "affected",
              "version": "7.0.5"
            },
            {
              "status": "affected",
              "version": "7.0.6"
            },
            {
              "status": "affected",
              "version": "7.1.0"
            },
            {
              "status": "affected",
              "version": "7.1.0.1"
            },
            {
              "status": "affected",
              "version": "7.1.0.2"
            },
            {
              "status": "affected",
              "version": "7.1.0.3"
            },
            {
              "status": "affected",
              "version": "7.2.0"
            },
            {
              "status": "affected",
              "version": "7.2.1"
            },
            {
              "status": "affected",
              "version": "7.2.2"
            },
            {
              "status": "affected",
              "version": "7.2.0.1"
            },
            {
              "status": "affected",
              "version": "7.2.3"
            },
            {
              "status": "affected",
              "version": "7.2.3.1"
            },
            {
              "status": "affected",
              "version": "7.2.4"
            },
            {
              "status": "affected",
              "version": "7.2.4.1"
            },
            {
              "status": "affected",
              "version": "7.2.5"
            },
            {
              "status": "affected",
              "version": "7.3.0"
            },
            {
              "status": "affected",
              "version": "7.3.1"
            },
            {
              "status": "affected",
              "version": "7.3.1.1"
            },
            {
              "status": "affected",
              "version": "7.3.1.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based management interface does not adequately validate user input. An attacker could exploit this vulnerability by authenticating to the application and sending crafted SQL queries to an affected system. A successful exploit could allow the attacker to obtain any data from the database, execute arbitrary commands on the underlying operating system, and elevate privileges to root. To exploit this vulnerability, an attacker would need at least Read Only user credentials."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-22T17:46:25.091Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-fmc-sqli-WFFDnNOs",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sqli-WFFDnNOs"
        }
      ],
      "source": {
        "advisory": "cisco-sa-fmc-sqli-WFFDnNOs",
        "defects": [
          "CSCwf92182"
        ],
        "discovery": "INTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20360",
    "datePublished": "2024-05-22T17:46:25.091Z",
    "dateReserved": "2023-11-08T15:08:07.650Z",
    "dateUpdated": "2024-08-01T21:59:42.328Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted