✕
Request a Demo
Rewterz
Rewterz Threat Advisory – CVE-2019-12689 – Cisco Firepower Management Center Remote Code Execution Vulnerability
October 3, 2019
5 Cyber Security Measures to Avoid Getting Hacked
October 3, 2019

Rewterz Threat Advisory – Cisco Firepower Management Center SQL Injection Vulnerabilities

Severity

High

Analysis Summary

CVE-2019-12679, CVE-2019-12680, CVE-2019-12681, CVE-2019-12682, CVE-2019-12683, CVE-2019-12684, CVE-2019-12685, CVE-2019-12686

These vulnerabilities exist due to improper input validation. An attacker could exploit these vulnerabilities by sending crafted SQL queries to an affected device. A successful exploit could allow the attacker to view information that they are not authorized to view, make changes to the system that they are not authorized to make, and execute commands within the underlying operating system that may affect the availability of the device.

Impact

Execution of arbitrary SQL injections on an affected device.

Affected Vendors

Cisco

Affected Products

Cisco Firepower Management Center (FMC)


Remediation

Please find vendor’s advisory for more details

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-sql-inj