CVE-2023-20155

Summary

CVE-2023-20155 is a logging API vulnerability in Cisco Firepower Management Center (FMC) Software. This issue allows unauthenticated, remote attackers to cause the device to become unresponsive or trigger an unexpected reload by sending a high rate of HTTP requests to the API. Additionally, attackers with valid user credentials, but not Administrator privileges, can gain access to system log files they would not normally have access to. The root cause of this vulnerability is a lack of rate-limiting for requests sent to the specific API. Successful exploitation could lead to denial of service conditions due to FMC CPU spiking to 100 percent utilization or device reloading. Once the attack traffic is stopped, CPU utilization returns to normal.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.