Cisco has urged its customers to update their Firepower Management Center (FMC) after patching a critical vulnerability that could have given attackers administrative privileges on affected devices.
Dubbed CVE-2019-16028, the vulnerability has been found in the firm’s platform for managing its network security products, including firewalls or malware protection. It has been given a CVE rating of 9.8, meaning it has been branded as ‘critical’
RELATED RESOURCE
How targeted simulations differ from penetration tests and vulnerability scanning
Stay one step ahead of cyber attackers
“The vulnerability is due to improper handling of Lightweight Directory Access Protocol (LDAP) authentication responses from an external authentication server,” an advisory from the company said.
“An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to gain administrative access to the web-based management interface of the affected device.
“The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.”
The flaw affects numerous versions of FMC, including several that have reached end-of-life, namely 6.1.0, 6.2.0, 6.2.1, and 6.2.2. Cisco has advised businesses using these iterations to upgrade to a release that integrates the fix before patching, such as versions 6.2.3, 6.3.0, 6.4.0, or 6.5.0.
The networking giant’s latest security issue has arisen just days before the firm is set to host its flagship Cisco Live 2020 conference in Barcelona.
The company has endured a topsy-turvy 2019, with a spate of security issues and negative headlines affecting its fortunes. For example, in August last year, three major vulnerabilities were found in the most popular switches used by its small and medium-sized business (SMB) customers.
This is in addition to its WebEx and Zoom platforms being hit with the ‘prying eye’ flaw in October, that would allow an attacker to use an enumeration attack to find open calls or meetings, if successfully exploited.
-
Vertiv announces new EMEA presidentNews The vendor’s EMEA leadership transition will see Ryan succeed Karsten Winther, who retires from the role in December
-
Google says reports of a 'huge' Gmail breach affecting millions of users are false, againNews Reports of a major Gmail affecting millions of users have been flooding the web this week – Google says they're "false" and you've nothing to worry about.
-
Critical Dell Storage Manager flaws could let hackers access sensitive data – patch nowNews A trio of flaws in Dell Storage Manager has prompted a customer alert
-
Cisco ASA customers urged to take immediate action as NCSC, CISA issue critical vulnerability warningsNews Cisco customers are urged to upgrade and secure systems immediately
-
Flaw in Lenovo’s customer service AI chatbot could let hackers run malicious code, breach networksNews Hackers abusing the Lenovo flaw could inject malicious code with just a single prompt
-
Industry welcomes the NCSC’s new Vulnerability Research Initiative – but does it go far enough?News The cybersecurity agency will work with external researchers to uncover potential security holes in hardware and software
-
Edge devices are now your weakest link: VPNs, firewalls, and routers were the leading source of initial compromise in 30% of incidents last year – here’s whyNews Compromised network edge devices have rapidly emerged as one of the biggest attack points for small and medium businesses.
-
Hackers are targeting Ivanti VPN users again – here’s what you need to knowNews Ivanti has re-patched a security flaw in its Connect Secure VPN appliances that's been exploited by a China-linked espionage group since at least the middle of March.
-
Broadcom issues urgent alert over three VMware zero-daysNews The firm says it has information to suggest all three are being exploited in the wild
-
Nakivo backup flaw still present on some systems months after firms’ ‘silent patch’, researchers claimNews Over 200 vulnerable Nakivo backup instances have been identified months after the firm silently patched a security flaw.
