« Volver al listado

Cisco

Cisco Secure FMC Software: vulnerabilidades y CVE

Cisco Secure FMC Software tiene 7 vulnerabilidades publicadas, 7 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE7
Últimos 12 meses7
Críticas2
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-76413Alta (8.2)0.46%—16 sept 2026
A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user.…
CVE-2026-76412Alta (8.5)0.44%—16 sept 2026
A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service. This vulnerability is due to an error when…
CVE-2026-20340Alta (8.8)0.69%—16 sept 2026
A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level. This vulnerability is due to unsecured deserialization of…
CVE-2026-20323Alta (8.3)0.09%—16 sept 2026
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to impersonate the peer device and obtain…
CVE-2026-20295Alta (8.6)0.55%—16 sept 2026
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to exhaust the available memory of an…
CVE-2026-20341Crítica (9.1)0.45%—16 sept 2026
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privileges. This vulnerability is due to unsecured…
CVE-2026-76420Crítica (9)0.38%—16 sept 2026
A vulnerability in the internal configuration of the Apache JServ Protocol (AJP) connector for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to impersonate a peer device. This…

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1210 Exploitation of Remote Services4
  2. T1190 Exploit Public-Facing Application3
  3. T1059 Command and Scripting Interpreter2
  4. T1078.001 Default Accounts1
  5. T1499.004 Application or System Exploitation1
  6. T1548.001 Setuid and Setgid1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

📰 Noticias relacionadas

Otros productos de Cisco