CVE-2024-20360
Cisco
CVE-2024-20360 is a critical SQL injection vulnerability in Cisco Firepower Management Center (FMC) Software, potentially allowing attackers to obtain sensitive data and execute arbitrary commands. The vulnerability stems from insufficient input validation in the web-based management interface. With a high SOCRadar Vulnerability Risk Score (SVRS) of 82, this CVE demands immediate attention and remediation due to its active exploitation in the wild. Successful exploitation requires authenticated access with at least Read Only privileges. The potential impact includes unauthorized data access, arbitrary command execution on the OS, and privilege escalation to root. This vulnerability is significant because it allows attackers, even with limited access, to compromise the entire FMC system, leading to severe security breaches. Addressing CWE-89 is crucial to prevent further exploitation.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.