InfoSecBulletin Cybersecurity for mankind
Cisco, a global network solutions leader, has reported a security issue with its Firepower Management Center (FMC) software. This vulnerability, known as CVE-2024-20360, has a CVSS score of 8.8, indicating a high severity level and a risk of widespread exploitation.
The vulnerability comes from not checking the input correctly in the web-based management interface of the FMC software. Attackers can use this weakness to inject harmful SQL queries into the system by logging in with even simple Read Only credentials.
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
Cisco has released software updates to fix a vulnerability. They urge all users to apply the updates right away and emphasize that there are no workarounds available.
The Cisco Product Security Incident Response Team (PSIRT) has not found any evidence of malicious exploitation of this vulnerability so far. However, it is important to take proactive measures due to the severity of the potential impacts.
Cisco Firepower Management Center users should apply the latest software updates, monitor for signs of compromise, and add extra security measures to reduce the risk.
This advisory is included in the May 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a full list of the advisories and their links, you can click to Cisco Event Response: May 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.
