CVE-2019-12687

A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to execute arbitrary commands within the affected device.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:secure_firewall_management_center:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3:*:*:*:*:*:*:*

History

26 Nov 2024, 16:09

Type Values Removed Values Added
First Time Cisco secure Firewall Management Center
CPE cpe:2.3:a:cisco:firepower_management_center:6.2.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firepower_management_center:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_management_center:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3:*:*:*:*:*:*:*
CPE cpe:2.3:a:cisco:firepower_management_center:6.2.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firepower_management_center:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_management_center:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3:*:*:*:*:*:*:*
First Time Cisco secure Firewall Management Center

21 Nov 2024, 04:23

Type Values Removed Values Added
References () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-rceĀ - Vendor Advisory () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-rceĀ - Vendor Advisory

Information

Published : 2019-10-02 19:15

Updated : 2024-11-26 16:09


NVD link : CVE-2019-12687

Mitre link : CVE-2019-12687

CVE.ORG link : CVE-2019-12687


JSON object : View

Products Affected

cisco

  • secure_firewall_management_center
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-20

Improper Input Validation