InfoSecBulletin Cybersecurity for mankind
Cisco, a global network solutions leader, has reported a security issue with its Firepower Management Center (FMC) software. This vulnerability, known as CVE-2024-20360, has a CVSS score of 8.8, indicating a high severity level and a risk of widespread exploitation.
The vulnerability comes from not checking the input correctly in the web-based management interface of the FMC software. Attackers can use this weakness to inject harmful SQL queries into the system by logging in with even simple Read Only credentials.
Eight New ICS Advisories released by CISA
Authority Denies
Hacker claim ransomware attack on Indonesia’s state bank BRI
London-based company “Builder.ai” reportedly exposed 1.2 TB data
(CVE-2024-12727, CVE-2024-12728, CVE-2024-12729)
Sophos resolved 3 critical vulnerabilities in Firewall
“Workshop on Cybersecurity Awareness and Needs Analysis” held at BBTA
CVE-2023-48788
Kaspersky reveals active exploitation of Fortinet Vulnerability
U.S. Weighs Ban on Chinese-Made Router TP-Link: WSJ reports
Daily Security Update Dated: 18.12.2024
CISA released best practices to secure Microsoft 365 Cloud environments
Data breach! Ireland fines Meta $264 million, Australia $50m
Cisco has released software updates to fix a vulnerability. They urge all users to apply the updates right away and emphasize that there are no workarounds available.
The Cisco Product Security Incident Response Team (PSIRT) has not found any evidence of malicious exploitation of this vulnerability so far. However, it is important to take proactive measures due to the severity of the potential impacts.
Cisco Firepower Management Center users should apply the latest software updates, monitor for signs of compromise, and add extra security measures to reduce the risk.
This advisory is included in the May 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a full list of the advisories and their links, you can click to Cisco Event Response: May 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.
