InfoSecBulletin Cybersecurity for mankind
Cisco, a global network solutions leader, has reported a security issue with its Firepower Management Center (FMC) software. This vulnerability, known as CVE-2024-20360, has a CVSS score of 8.8, indicating a high severity level and a risk of widespread exploitation.
The vulnerability comes from not checking the input correctly in the web-based management interface of the FMC software. Attackers can use this weakness to inject harmful SQL queries into the system by logging in with even simple Read Only credentials.
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
Cisco has released software updates to fix a vulnerability. They urge all users to apply the updates right away and emphasize that there are no workarounds available.
The Cisco Product Security Incident Response Team (PSIRT) has not found any evidence of malicious exploitation of this vulnerability so far. However, it is important to take proactive measures due to the severity of the potential impacts.
Cisco Firepower Management Center users should apply the latest software updates, monitor for signs of compromise, and add extra security measures to reduce the risk.
This advisory is included in the May 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a full list of the advisories and their links, you can click to Cisco Event Response: May 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.
