Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-20114

A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to download arbitrary files from an a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability is due to a lack of input sanitation. An attacker could exploit this vulnerability by sending a crafted HTTPS request. A successful exploit could allow the attacker to download arbitrary files from the affected system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Firepower Management Center

  • 6.7.0affected
  • 6.7.0.1affected
  • 6.7.0.2affected
  • 6.7.0.3affected
  • 7.0.0affected
  • 7.0.0.1affected
  • 7.0.1affected
  • 7.0.1.1affected
  • 7.0.2affected
  • 7.0.2.1affected
  • 7.0.3affected
  • 7.0.4affected
  • 7.0.5affected
  • 7.1.0affected
  • 7.1.0.1affected
  • 7.1.0.2affected
  • 7.1.0.3affected
  • 7.2.0affected
  • 7.2.1affected
  • 7.2.2affected
  • 7.2.0.1affected
  • 7.2.3affected
  • 7.2.3.1affected
  • 7.3.0affected
  • 7.3.1affected
  • 7.3.1.1affected

References