Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
Unknown
Privileges Required
Unknown
Attack Vector
Unknown
0

CVE-2024-20274

Disclosure Date: October 23, 2024 •
CVE-2024-20274
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to inject arbitrary HTML content into a device-generated document.

This vulnerability is due to improper validation of user-supplied data. An attacker could exploit this vulnerability by submitting malicious content to an affected device and using the device to generate a document that contains sensitive information. A successful exploit could allow the attacker to alter the standard layout of the device-generated documents, access arbitrary files from the underlying operating system, and conduct server-side request forgery (SSRF) attacks. To successfully exploit this vulnerability, an attacker would need valid credentials for a user account with policy-editing permissions, such as Network Admin, Intrusion Admin, or any custom user role with the same capabilities.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
None
Impact Score:
Unknown
Exploitability Score:
Unknown
Vector:
Unknown
Attack Vector (AV):
Unknown
Attack Complexity (AC):
Unknown
Privileges Required (PR):
Unknown
User Interaction (UI):
Unknown
Scope (S):
Unknown
Confidentiality (C):
Unknown
Integrity (I):
Unknown
Availability (A):
Unknown

General Information

Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
Cisco Firepower Management Center 6.2.3.12
Cisco Firepower Management Center 6.2.3.1
Cisco Firepower Management Center 6.2.3.10
Cisco Firepower Management Center 6.2.3.8
Cisco Firepower Management Center 6.4.0.6
Cisco Firepower Management Center 6.2.3
Cisco Firepower Management Center 6.4.0.7
Cisco Firepower Management Center 6.2.3.13
Cisco Firepower Management Center 6.2.3.5
Cisco Firepower Management Center 6.4.0.4
Cisco Firepower Management Center 6.2.3.9
Cisco Firepower Management Center 6.2.3.14
Cisco Firepower Management Center 6.4.0.1
Cisco Firepower Management Center 6.2.3.6
Cisco Firepower Management Center 6.2.3.11
Cisco Firepower Management Center 6.4.0.8
Cisco Firepower Management Center 6.2.3.2
Cisco Firepower Management Center 6.4.0.2
Cisco Firepower Management Center 6.2.3.3
Cisco Firepower Management Center 6.4.0.3
Cisco Firepower Management Center 6.2.3.7
Cisco Firepower Management Center 6.2.3.4
Cisco Firepower Management Center 6.4.0.5
Cisco Firepower Management Center 6.4.0
Cisco Firepower Management Center 6.2.3.15
Cisco Firepower Management Center 6.6.0
Cisco Firepower Management Center 6.4.0.9
Cisco Firepower Management Center 6.2.3.16
Cisco Firepower Management Center 6.6.0.1
Cisco Firepower Management Center 6.6.1
Cisco Firepower Management Center 6.4.0.10
Cisco Firepower Management Center 6.7.0
Cisco Firepower Management Center 6.4.0.11
Cisco Firepower Management Center 6.6.3
Cisco Firepower Management Center 6.7.0.1
Cisco Firepower Management Center 6.6.4
Cisco Firepower Management Center 6.4.0.12
Cisco Firepower Management Center 6.7.0.2
Cisco Firepower Management Center 7.0.0
Cisco Firepower Management Center 6.2.3.17
Cisco Firepower Management Center 7.0.0.1
Cisco Firepower Management Center 6.6.5
Cisco Firepower Management Center 7.0.1
Cisco Firepower Management Center 7.1.0
Cisco Firepower Management Center 6.6.5.1
Cisco Firepower Management Center 6.4.0.13
Cisco Firepower Management Center 6.7.0.3
Cisco Firepower Management Center 7.0.1.1
Cisco Firepower Management Center 6.2.3.18
Cisco Firepower Management Center 6.4.0.14
Cisco Firepower Management Center 6.6.5.2
Cisco Firepower Management Center 7.1.0.1
Cisco Firepower Management Center 7.0.2
Cisco Firepower Management Center 6.4.0.15
Cisco Firepower Management Center 7.2.0
Cisco Firepower Management Center 7.0.2.1
Cisco Firepower Management Center 7.0.3
Cisco Firepower Management Center 6.6.7
Cisco Firepower Management Center 7.1.0.2
Cisco Firepower Management Center 7.2.0.1
Cisco Firepower Management Center 7.0.4
Cisco Firepower Management Center 7.2.1
Cisco Firepower Management Center 7.0.5
Cisco Firepower Management Center 6.4.0.16
Cisco Firepower Management Center 7.3.0
Cisco Firepower Management Center 7.2.2
Cisco Firepower Management Center 6.6.7.1
Cisco Firepower Management Center 7.3.1
Cisco Firepower Management Center 7.2.3
Cisco Firepower Management Center 7.1.0.3
Cisco Firepower Management Center 7.2.3.1
Cisco Firepower Management Center 7.2.4
Cisco Firepower Management Center 7.0.6
Cisco Firepower Management Center 7.2.4.1
Cisco Firepower Management Center 7.2.5
Cisco Firepower Management Center 7.3.1.1
Cisco Firepower Management Center 7.4.0
Cisco Firepower Management Center 6.4.0.17
Cisco Firepower Management Center 7.0.6.1
Cisco Firepower Management Center 7.2.5.1
Cisco Firepower Management Center 7.4.1
Cisco Firepower Management Center 7.4.1.1
Cisco Firepower Management Center 6.4.0.18
Cisco Firepower Management Center 6.6.7.2
Cisco Firepower Management Center 7.2.5.2
Cisco Firepower Management Center 7.3.1.2
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown
Technical Analysis