CVE-2022-20926

Severity Score

8.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system.
The vulnerability is due to insufficient validation of user-supplied parameters for certain API endpoints. An attacker could exploit this vulnerability by sending crafted input to an affected API endpoint. A successful exploit could allow an attacker to execute arbitrary commands on the device with low system privileges. To successfully exploit this vulnerability, an attacker would need valid credentials for a user with Device permissions: by default, only Administrators, Security Approvers and Network Admins user accounts have these permissions.

Una vulnerabilidad en la interfaz de administración web del software Cisco Firepower Management Center (FMC) podría permitir que un atacante remoto autenticado ejecute comandos arbitrarios en el Sistema Operativo subyacente. La vulnerabilidad se debe a una validación insuficiente de los parámetros proporcionados por el usuario para algunas API de endpoint. Un atacante podría aprovechar esta vulnerabilidad enviando información manipulada a un endpoint API afectado. Un exploit exitoso podría permitir a un atacante ejecutar comandos arbitrarios en el dispositivo con privilegios bajos del sistema. Para aprovechar esta vulnerabilidad con éxito, un atacante necesitaría credenciales válidas para un usuario con permisos de dispositivo: de forma predeterminada, solo las cuentas de usuario Administradores, Aprobadores de Seguridad y Administradores de Red tienen estos permisos.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2021-11-02 CVE Reserved
2022-11-10 CVE Published
2024-06-17 EPSS Updated
2024-10-25 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CAPEC

References (1)

URL	Tag	Source
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-Z3B5MY35

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center"				7.0.0 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.0"		-		Affected
Cisco Search vendor "Cisco"		Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center"				7.0.0.1 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.0.1"		-		Affected
Cisco Search vendor "Cisco"		Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center"				7.0.1 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.1"		-		Affected
Cisco Search vendor "Cisco"		Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center"				7.0.1.1 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.1.1"		-		Affected
Cisco Search vendor "Cisco"		Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center"				7.0.2 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.2"		-		Affected
Cisco Search vendor "Cisco"		Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center"				7.0.2.1 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.2.1"		-		Affected
Cisco Search vendor "Cisco"		Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center"				7.0.3 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.3"		-		Affected
Cisco Search vendor "Cisco"		Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center"				7.0.4 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.4"		-		Affected
Cisco Search vendor "Cisco"		Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center"				7.1.0 Search vendor "Cisco" for product "Firepower Management Center" and version "7.1.0"		-		Affected
Cisco Search vendor "Cisco"		Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center"				7.1.0.1 Search vendor "Cisco" for product "Firepower Management Center" and version "7.1.0.1"		-		Affected
Cisco Search vendor "Cisco"		Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center"				7.1.0.2 Search vendor "Cisco" for product "Firepower Management Center" and version "7.1.0.2"		-		Affected