DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Cisco Secure Firewall Management Center: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-09-16
Ein Angreifer kann mehrere Schwachstellen in Cisco Secure Firewall Management Center ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebige Befehle als Root auszuführen, Berechtigungen auf Root zu erweitern, SQL-Injection durchzuführen, Anmeldedaten für Administratorsitzungen zu erlangen, sensible Daten zu manipulieren und offenzulegen oder Denial-of-Service-Zustände herbeizuführen.
01
beschreibt (20)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-76413US | high8.2 | — | ||
A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log i… | ||||
| CVE-2026-76412US | high8.5 | — | ||
A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service.… | ||||
| CVE-2026-20344US | high8.8 | — | ||
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack against an affect… | ||||
| CVE-2026-20343US | high7.5OT erhöht | — | ||
A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space.
This vu… | ||||
| CVE-2026-20342US | high7.7 | — | ||
A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected system.
T… | ||||
| CVE-2026-20340US | high8.8 | — | ||
A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level.
This vulnerability is… | ||||
| CVE-2026-20336US | high8.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar… | ||||
| CVE-2026-20335US | high8.1 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar… | ||||
| CVE-2026-20334US | high8.4 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar… | ||||
| CVE-2026-20333US | high8.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar… | ||||
| CVE-2026-20332US | critical9.9 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar… | ||||
| CVE-2026-20323US | high8.3 | — | ||
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to… | ||||
| CVE-2026-20295US | high8.6 | — | ||
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to ex… | ||||
| CVE-2026-20341US | critical9.1 | — | ||
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges.
Th… | ||||
| CVE-2026-20330US | critical9.9 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar… | ||||
| CVE-2026-20329US | critical9.9 | Exploit | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar… | ||||
| CVE-2026-20324US | critical9.9OT erhöht | — | ||
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to execu… | ||||
| CVE-2026-20242US | critical9.8 | — | ||
A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitra… | ||||
| CVE-2026-76420US | critical9.0 | — | ||
A vulnerability in the internal configuration of the Apache JServ Protocol (AJP) connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to imp… | ||||
| CVE-2026-20331US | critical9.6 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Softwar… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Security Advisoryexternal
- Cisco Security Advisoryexternal
- Cisco Security Advisoryexternal
- Cisco Security Advisoryexternal
- Cisco Security Advisoryexternal
- Cisco Security Advisoryexternal
- Cisco Security Advisory cisco-sa-fmc-sftunn-codex-c3O4Jft2 vom 2026-09-16external
- WID-SEC-W-2026-3417 - CSAF Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan