CVE-2024-20379
Last modified
CVE-2024-20379 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. EPSS estimates a 0.61% chance of exploitation in the next 30 days.
Description
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files on the underlying operating system of the affected device. The attacker would need valid user credentials to exploit this vulnerability.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Firepower Management Center | 7.4.0 |
| Cisco | Firepower Management Center | 7.4.1 |
| Cisco | Firepower Management Center | 7.4.1.1 |
| Cisco | Secure Firewall Management Center | 7.3.0 |
| Cisco | Secure Firewall Management Center | 7.3.1 |
| Cisco | Secure Firewall Management Center | 7.3.1.1 |
| Cisco | Secure Firewall Management Center | 7.3.1.2 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-20379?
How severe is CVE-2024-20379?
How do I fix CVE-2024-20379?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-20373A vulnerability in the implementation of the Simple Network …5.3
- CVE-2024-20374A vulnerability in the web-based management interface of Cis…7.2
- CVE-2024-20375A vulnerability in the SIP call processing function of Cisco…7.5
- CVE-2024-20376A vulnerability in the web-based management interface of Cis…7.5
- CVE-2024-20377A vulnerability in the web-based management interface of Cis…5.4
- CVE-2024-20378A vulnerability in the web-based management interface of Cis…7.5
- CVE-2024-2038The Visual Website Collaboration, Feedback & Project Managem…7.5
- CVE-2024-20380A vulnerability in the HTML parser of ClamAV could allow an …7.5
- CVE-2024-20381A vulnerability in the JSON-RPC API feature in Cisco Crosswo…8.8
- CVE-2024-20382A vulnerability in the VPN web client services feature of Ci…6.1
- CVE-2024-20383A vulnerability in the web-based management interface of Cis…8.4
- CVE-2024-20384A vulnerability in the Network Service Group (NSG) feature o…5.8
Are you affected by CVE-2024-20379?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST