8.1
Élevée
CVE-2020-3550 A vulnerability in the sfmgr daemon of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat…
Description
A vulnerability in the sfmgr daemon of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to perform directory traversal and access directories outside the restricted path. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a relative path in specific sfmgr commands. An exploit could allow the attacker to read or write arbitrary files on an sftunnel-connected peer device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Firepower Management Center | Versions non publiées |
Références
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Firepower Management Center
Les 129 CVE de Cisco Firepower Management Center →
CVE-2025-20220
A vulnerability in the CLI of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat…
6.0
Moyenne
CVE-2025-20306
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could…
4.9
Moyenne
CVE-2025-20302
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated,…
4.3
Moyenne
CVE-2025-20301
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated,…
6.5
Moyenne