جزئیات آسیب‌پذیری
CVE-2026-20079
بهره‌برداری فعال
Cisco Secure Firewall Management Center
Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
CVSS 3.1
10.0بحرانی
نمای کلی
اکسپلویت‌های عمومی
اخبار مرتبط
خط زمانی
خلاصه‌ی فارسی
خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.
شرح رسمی (انگلیسی)
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow root access to the device.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 10.0بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Cisco | Cisco Secure Firewall Management Center (FMC) | 10.0.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 10.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.6.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.6.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.8.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.1.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.1.0.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.1.0.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.10.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.10.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.11 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.5.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.5.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.8.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.3.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.3.1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.7.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.7.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.7.10.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.7.11 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.7.12 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۴- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2
- https://blog.talosintelligence.com/fmc-ongoing-exploitation/ third-party-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20079 government-resource
- http://seclists.org/fulldisclosure/2026/Aug/80
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۲/۱۳
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۲۵
- وضعیت
- PUBLISHED
- صادرکننده (CNA)
- cisco
- اولویت کلون
- به‌زودی
فهرست KEV آژانس CISA
- تاریخ افزوده‌شدن
- ۱۴۰۵/۰۶/۱۸
- مهلت رفع
- ۱۴۰۵/۰۶/۲۱
- استفاده در باج‌افزار
- نامشخص
پیش‌بینی بهره‌برداری (EPSS)
۸۸٫۶۵٪
احتمال بهره‌برداری در ۳۰ روز
۹۹٫۷٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- Automatable
- yes
- Exploitation
- active
- Technical Impact
- total
ضعف‌ها (CWE)
- CWE-288Authentication Bypass Using an Alternate Path or Channel