Information disclosure in Cisco Firepower Management Center (FMC) Software

1) Information disclosure

EUVDB-ID: #VU82685

Risk: Medium

CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-20114

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a lack of input sanitation in the file download feature. A remote user can send a specially crafted HTTPS request and download arbitrary files from the affected system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC): 7.0.0 - 7.3.0

CPE2.3

• cpe:2.3:a:cisco_systems:cisco_firepower_management_center:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco_systems:cisco_firepower_management_center:7.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:cisco_systems:cisco_firepower_management_center:7.2.0:*:*:*:*:*:*:*
• cpe:2.3:a:cisco_systems:cisco_firepower_management_center:7.2.4:*:*:*:*:*:*:*
• cpe:2.3:a:cisco_systems:cisco_firepower_management_center:7.3.0:*:*:*:*:*:*:*

External links

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-file-download-7js4ug2J

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.