CVE-2023-20155
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-20155 is a logging API vulnerability in Cisco Firepower Management Center (FMC) Software. This issue allows unauthenticated, remote attackers to cause the device to become unresponsive or trigger an unexpected reload by sending a high rate of HTTP requests to the API. Additionally, attackers with valid user credentials, but not Administrator privileges, can gain access to system log files they would not normally have access to. The root cause of this vulnerability is a lack of rate-limiting for requests sent to the specific API. Successful exploitation could lead to denial of service conditions due to FMC CPU spiking to 100 percent utilization or device reloading. Once the attack traffic is stopped, CPU utilization returns to normal.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cisco FirePOWER Management Center
Affected Vendors
- Cisco Systems Inc
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions