Unknown
CVE-2024-20410
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
CVE-2024-20410
MITRE ATT&CK
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Topic Tags
Description
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by inserting crafted input into various data fields in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface, or access sensitive, browser-based information.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
General Information
Vendors
Products
- firepower management center 6.4.0.17,
- firepower management center 6.4.0.18,
- firepower management center 6.6.7.2,
- firepower management center 7.0.6.1,
- firepower management center 7.0.6.2,
- firepower management center 7.2.5.1,
- firepower management center 7.2.5.2,
- firepower management center 7.2.6,
- firepower management center 7.2.7,
- firepower management center 7.2.8,
- firepower management center 7.2.8.1,
- firepower management center 7.4.0,
- firepower management center 7.4.1,
- firepower management center 7.4.1.1,
- secure firewall management center 6.2.3,
- secure firewall management center 6.2.3.1,
- secure firewall management center 6.2.3.10,
- secure firewall management center 6.2.3.11,
- secure firewall management center 6.2.3.12,
- secure firewall management center 6.2.3.13,
- secure firewall management center 6.2.3.14,
- secure firewall management center 6.2.3.15,
- secure firewall management center 6.2.3.16,
- secure firewall management center 6.2.3.17,
- secure firewall management center 6.2.3.18,
- secure firewall management center 6.2.3.2,
- secure firewall management center 6.2.3.3,
- secure firewall management center 6.2.3.4,
- secure firewall management center 6.2.3.5,
- secure firewall management center 6.2.3.6,
- secure firewall management center 6.2.3.7,
- secure firewall management center 6.2.3.8,
- secure firewall management center 6.2.3.9,
- secure firewall management center 6.4.0,
- secure firewall management center 6.4.0.1,
- secure firewall management center 6.4.0.10,
- secure firewall management center 6.4.0.11,
- secure firewall management center 6.4.0.12,
- secure firewall management center 6.4.0.13,
- secure firewall management center 6.4.0.14,
- secure firewall management center 6.4.0.15,
- secure firewall management center 6.4.0.16,
- secure firewall management center 6.4.0.2,
- secure firewall management center 6.4.0.3,
- secure firewall management center 6.4.0.4,
- secure firewall management center 6.4.0.5,
- secure firewall management center 6.4.0.6,
- secure firewall management center 6.4.0.7,
- secure firewall management center 6.4.0.8,
- secure firewall management center 6.4.0.9,
- secure firewall management center 6.6.0,
- secure firewall management center 6.6.0.1,
- secure firewall management center 6.6.1,
- secure firewall management center 6.6.3,
- secure firewall management center 6.6.4,
- secure firewall management center 6.6.5,
- secure firewall management center 6.6.5.1,
- secure firewall management center 6.6.5.2,
- secure firewall management center 6.6.7,
- secure firewall management center 6.6.7.1,
- secure firewall management center 6.7.0,
- secure firewall management center 6.7.0.1,
- secure firewall management center 6.7.0.2,
- secure firewall management center 6.7.0.3,
- secure firewall management center 7.0.0,
- secure firewall management center 7.0.0.1,
- secure firewall management center 7.0.1,
- secure firewall management center 7.0.1.1,
- secure firewall management center 7.0.2,
- secure firewall management center 7.0.2.1,
- secure firewall management center 7.0.3,
- secure firewall management center 7.0.4,
- secure firewall management center 7.0.5,
- secure firewall management center 7.0.6,
- secure firewall management center 7.1.0,
- secure firewall management center 7.1.0.1,
- secure firewall management center 7.1.0.2,
- secure firewall management center 7.1.0.3,
- secure firewall management center 7.2.0,
- secure firewall management center 7.2.0.1,
- secure firewall management center 7.2.1,
- secure firewall management center 7.2.2,
- secure firewall management center 7.2.3,
- secure firewall management center 7.2.3.1,
- secure firewall management center 7.2.4,
- secure firewall management center 7.2.4.1,
- secure firewall management center 7.2.5,
- secure firewall management center 7.3.0,
- secure firewall management center 7.3.1,
- secure firewall management center 7.3.1.1,
- secure firewall management center 7.3.1.2
References
Additional Info
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below: