InfoSecBulletin Cybersecurity for mankind
Cisco, a global network solutions leader, has reported a security issue with its Firepower Management Center (FMC) software. This vulnerability, known as CVE-2024-20360, has a CVSS score of 8.8, indicating a high severity level and a risk of widespread exploitation.
The vulnerability comes from not checking the input correctly in the web-based management interface of the FMC software. Attackers can use this weakness to inject harmful SQL queries into the system by logging in with even simple Read Only credentials.
338 fraudulent Olympics games ticketing websites
ASUS warn serious security vulnerability on 7 routers
AWS Announced New Malware Detection Tool For S3 Buckets
150,000 phones registered under one IMEI number in Bangladesh
CISA Releases Twenty Industrial Control Systems Advisories
Current web vulnerabilities in Bangladesh across vendor product line
Criminals impersonating CISA’s employees in phone calls
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Microsoft Tuesday fixes 51 flaws, 18 RCEs June 2024 Patch
Hackers breached 20,000 FortiGate systems worldwide: MIVD
Cisco has released software updates to fix a vulnerability. They urge all users to apply the updates right away and emphasize that there are no workarounds available.
The Cisco Product Security Incident Response Team (PSIRT) has not found any evidence of malicious exploitation of this vulnerability so far. However, it is important to take proactive measures due to the severity of the potential impacts.
Cisco Firepower Management Center users should apply the latest software updates, monitor for signs of compromise, and add extra security measures to reduce the risk.
This advisory is included in the May 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a full list of the advisories and their links, you can click to Cisco Event Response: May 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.
