InfoSecBulletin Cybersecurity for mankind
Cisco, a global network solutions leader, has reported a security issue with its Firepower Management Center (FMC) software. This vulnerability, known as CVE-2024-20360, has a CVSS score of 8.8, indicating a high severity level and a risk of widespread exploitation.
The vulnerability comes from not checking the input correctly in the web-based management interface of the FMC software. Attackers can use this weakness to inject harmful SQL queries into the system by logging in with even simple Read Only credentials.
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
Cisco has released software updates to fix a vulnerability. They urge all users to apply the updates right away and emphasize that there are no workarounds available.
The Cisco Product Security Incident Response Team (PSIRT) has not found any evidence of malicious exploitation of this vulnerability so far. However, it is important to take proactive measures due to the severity of the potential impacts.
Cisco Firepower Management Center users should apply the latest software updates, monitor for signs of compromise, and add extra security measures to reduce the risk.
This advisory is included in the May 2024 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication. For a full list of the advisories and their links, you can click to Cisco Event Response: May 2024 Semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication.
