جزئیات آسیب‌پذیری
CVE-2026-20131
بهره‌برداری فعال
Cisco Secure Firewall Management Center
Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
CVSS 3.1
10.0بحرانی
نمای کلی
اکسپلویت‌های عمومی
اخبار مرتبط
خط زمانی
خلاصه‌ی فارسی
خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.
شرح رسمی (انگلیسی)
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Java byte stream. An attacker could exploit this vulnerability by sending a crafted serialized Java object to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate privileges to root. Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 10.0بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Cisco | Cisco Secure Firewall Management Center (FMC) | 10.0.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.13 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.14 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.15 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.16 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.17 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 6.4.0.18 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.6.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.6.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.0.8.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.1.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.1.0.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.1.0.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.10.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.10.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.5.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.5.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.8.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.2.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.3.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.3.1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.4.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.6.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.7.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.7.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.7.10.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Management Center (FMC) | 7.7.11 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۳- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh
- https://aws.amazon.com/blogs/security/amazon-threat-intelligence-teams-identify-interlock-ransomware-campaign-targeting-enterprise-firewalls/ third-party-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20131 government-resource
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۱۲/۱۳
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۵/۲۳
- وضعیت
- PUBLISHED
- صادرکننده (CNA)
- cisco
- اولویت کلون
- به‌زودی
فهرست KEV آژانس CISA
- تاریخ افزوده‌شدن
- ۱۴۰۴/۱۲/۲۸
- مهلت رفع
- ۱۴۰۵/۰۱/۰۲
- استفاده در باج‌افزار
- بله
پیش‌بینی بهره‌برداری (EPSS)
۴۴٫۴۳٪
احتمال بهره‌برداری در ۳۰ روز
۹۸٫۷٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- Automatable
- yes
- Exploitation
- active
- Technical Impact
- total
ضعف‌ها (CWE)
- CWE-502Deserialization of Untrusted Data