Aller au contenu
en Se connecter
7.5 Élevée

CVE-2026-20343 A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to…

Description

A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space. This vulnerability exists because a critical API lacks authentication. An attacker could exploit this vulnerability by repeatedly invoking the API. A successful exploit could allow the attacker to download sensitive files that should be restricted and consume disk space so the device could become unresponsive, causing a DoS condition.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Secure Firewall Management Center (FMC) 10.0 10.0.0 → 10.0.1 Pas de correctif indiqué
Cisco Secure Firewall Management Center (FMC) 7.7 7.7.0 → 7.7.12 Pas de correctif indiqué
Cisco Secure Firewall Management Center (FMC) 7.6 7.6.0 → 7.6.5 Pas de correctif indiqué
Cisco Secure Firewall Management Center (FMC) 7.4 7.4.0 → 7.4.7 Pas de correctif indiqué
Cisco Secure Firewall Management Center (FMC) 7.3 7.3.0 → 7.3.1.2 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Secure Firewall Management Center (FMC)

Les 29 CVE de Cisco Secure Firewall Management Center (FMC) →
CVE-2026-20342 A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote… 7.7 Élevée CVE-2026-20323 A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD… 8.3 Élevée CVE-2026-76412 A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote… 8.5 Élevée CVE-2026-20333 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security… 8.8 Élevée
Suivre cette CVE