The web-based GUI in Cisco Firepower Management Center 4.x and 5.x prior to 5.3.1.2 and 5.4.x prior to 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services 4.x and 5.x prior to 5.3.1.2 and 5.4.x prior to 5.4.0.1 allows remote authenticated users to execute arbitrary commands as root via crafted HTTP requests, aka Bug ID CSCur25513.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco firepower management center 5.3.0.4 |
||
cisco firepower management center 5.2.0 |
||
cisco firepower management center 5.3.1 |
||
cisco firepower management center 5.4.0 |
||
cisco firepower management center 4.10.3.9 |
Vulmon