Cisco FirePOWER Management Center Web-based Management Interface data cross site scripting

Summaryinfo

A vulnerability classified as problematic was found in Cisco FirePOWER Management Center. Affected by this vulnerability is an unknown functionality of the component Web-based Management Interface. Such manipulation of the argument data leads to cross site scripting. This vulnerability is uniquely identified as CVE-2022-20836. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Cisco FirePOWER Management Center (Firewall Software) (version unknown). Affected by this issue is an unknown function of the component Web-based Management Interface. The manipulation of the argument data with an unknown input leads to a cross site scripting vulnerability. Using CWE to declare the problem leads to CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. Impacted is integrity. CVE summarizes:

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by inserting crafted input into various data fields in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface, or access sensitive, browser-based information. In some cases, it is also possible to cause a temporary availability impact to portions of the FMC Dashboard.

The weakness was disclosed 11/16/2022 as cisco-sa-fmc-xss-LATZYzxs. The advisory is shared for download at tools.cisco.com. This vulnerability is handled as CVE-2022-20836 since 11/02/2021. Additional levels of successful authentication are required for exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1059.007.

Upgrading eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Firewall Software

Vendor

• Cisco

Name

• FirePOWER Management Center

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion