CVE-2022-20743 — Unrestricted File Upload in Cisco Secure Firewall Management Center

CWE-434 — Unrestricted File Upload4 documents4 sources
Severity
8.8HIGHNVD
CNA6.5
EPSS
0.7%
top 27.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Secure Firewall Management CenterCisco Firepower Management Center
Timeline
PublishedMay 3
Latest updateMay 4

Description

A vulnerability in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to bypass security protections and upload malicious files to the affected system. This vulnerability is due to improper validation of files uploaded to the web management interface of Cisco FMC Software. An attacker could exploit this vulnerability by uploading a maliciously crafted file to a device running affected software. A successful exploit could…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-5cj7-j8hc-47xc: A vulnerability in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to b↗2022-05-04
▶
CVEList
Cisco Firepower Management Center File Upload Security Bypass Vulnerability↗2022-05-03
▶

📋Vendor Advisories

1
Cisco
Cisco Firepower Management Center File Upload Security Bypass Vulnerability↗2022-04-27
▶
CVE-2022-20743 — Unrestricted File Upload in Cisco | cvebase