CVE-2022-20743

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center (FMC) Software (affected versions not specified)

Description A vulnerability in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to bypass security protections and upload malicious files to the affected system. This is due to improper validation of files uploaded to the web management interface. An attacker could exploit this by uploading a maliciously crafted file, allowing them to store malicious files on the device and potentially execute arbitrary code on the affected device with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.