CVE-2023-20048
Last modified
CVE-2023-20048 is a critical-severity vulnerability rated 9.9/10 on the CVSS scale. A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute certain unauthorized configuration commands on a Firepower Threat Defense (FTD) device that is managed by the FMC Software. This vulnerability is due to insufficient authorization of configuration commands that are sent through the web service interface. EPSS estimates a 15.82% chance of exploitation in the next 30 days.
Description
A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute certain unauthorized configuration commands on a Firepower Threat Defense (FTD) device that is managed by the FMC Software. This vulnerability is due to insufficient authorization of configuration commands that are sent through the web service interface. An attacker could exploit this vulnerability by authenticating to the FMC web services interface and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute certain configuration commands on the targeted FTD device. To successfully exploit this vulnerability, an attacker would need valid credentials on the FMC Software.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Secure Firewall Management Center | >= 6.2.3, <= 6.2.3.18 |
| Cisco | Secure Firewall Management Center | >= 6.4.0, <= 6.4.0.16 |
| Cisco | Secure Firewall Management Center | >= 6.6.0, <= 6.6.7.1 |
| Cisco | Secure Firewall Management Center | >= 6.7.0, <= 6.7.0.3 |
| Cisco | Secure Firewall Management Center | >= 7.0.0, <= 7.0.5 |
| Cisco | Secure Firewall Management Center | >= 7.1.0, <= 7.1.0.3 |
| Cisco | Secure Firewall Management Center | >= 7.2.0, <= 7.2.3.1 |
| Cisco | Secure Firewall Management Center | >= 7.3.0, <= 7.3.1.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-20048?
How severe is CVE-2023-20048?
How do I fix CVE-2023-20048?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-20042A vulnerability in the AnyConnect SSL VPN feature of Cisco A…8.6
- CVE-2023-20043A vulnerability in Cisco CX Cloud Agent of could allow an au…6.7
- CVE-2023-20044A vulnerability in Cisco CX Cloud Agent of could allow an au…7.3
- CVE-2023-20045A vulnerability in the web-based management interface of Cis…7.2
- CVE-2023-20046A vulnerability in the key-based SSH authentication feature …8.8
- CVE-2023-20047A vulnerability in the Link Layer Discovery Protocol (LLDP) …6.5
- CVE-2023-20049A vulnerability in the bidirectional forwarding detection (B…7.5
- CVE-2023-2005Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable…8.8
- CVE-2023-20050A vulnerability in the CLI of Cisco NX-OS Software could all…7.8
- CVE-2023-20051A vulnerability in the Vector Packet Processor (VPP) of Cisc…7.5
- CVE-2023-20052On Feb 15, 2023, the following vulnerability in the ClamAV s…5.3
- CVE-2023-20053A vulnerability in the web-based management interface of Cis…6.1
Are you affected by CVE-2023-20048?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST