CVE-2022-20926
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system.
The vulnerability is due to insufficient validation of user-supplied parameters for certain API endpoints. An attacker could exploit this vulnerability by sending crafted input to an affected API endpoint. A successful exploit could allow an attacker to execute arbitrary commands on the device with low system privileges. To successfully exploit this vulnerability, an attacker would need valid credentials for a user with Device permissions: by default, only Administrators, Security Approvers and Network Admins user accounts have these permissions.
Una vulnerabilidad en la interfaz de administración web del software Cisco Firepower Management Center (FMC) podría permitir que un atacante remoto autenticado ejecute comandos arbitrarios en el Sistema Operativo subyacente. La vulnerabilidad se debe a una validación insuficiente de los parámetros proporcionados por el usuario para algunas API de endpoint. Un atacante podría aprovechar esta vulnerabilidad enviando información manipulada a un endpoint API afectado. Un exploit exitoso podría permitir a un atacante ejecutar comandos arbitrarios en el dispositivo con privilegios bajos del sistema. Para aprovechar esta vulnerabilidad con éxito, un atacante necesitaría credenciales válidas para un usuario con permisos de dispositivo: de forma predeterminada, solo las cuentas de usuario Administradores, Aprobadores de Seguridad y Administradores de Red tienen estos permisos.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-11-02 CVE Reserved
- 2022-11-10 CVE Published
- 2024-06-17 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-Z3B5MY35 |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 7.0.0 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 7.0.0.1 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.0.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 7.0.1 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 7.0.1.1 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.1.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 7.0.2 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 7.0.2.1 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.2.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 7.0.3 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 7.0.4 Search vendor "Cisco" for product "Firepower Management Center" and version "7.0.4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 7.1.0 Search vendor "Cisco" for product "Firepower Management Center" and version "7.1.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 7.1.0.1 Search vendor "Cisco" for product "Firepower Management Center" and version "7.1.0.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 7.1.0.2 Search vendor "Cisco" for product "Firepower Management Center" and version "7.1.0.2" | - |
Affected
| ||||||