CVE-2020-3301 — Hard-coded Credentials in Cisco Firepower Management Center

CWE-798 — Hard-coded Credentials4 documents4 sources
Severity
4.4MEDIUMNVD
EPSS
0.2%
top 57.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Firepower Management CenterCisco Secure Firewall Management Center
Timeline
PublishedMay 6
Latest updateMay 24

Description

Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 0.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-j4h3-2w39-xvrf: Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access↗2022-05-24
▶
CVEList
Cisco Firepower Management Center Static Credential Vulnerabilities↗2020-05-06
▶

📋Vendor Advisories

1
Cisco
Cisco Firepower Management Center Static Credential Vulnerabilities↗2020-05-06
▶
CVE-2020-3301 — Hard-coded Credentials in Cisco | cvebase