Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2018-0365

Published: 21/06/2018 Updated: 09/10/2019
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote malicious user to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the malicious user to perform arbitrary actions on the targeted device via a web browser and with the privileges of the user. Cisco Bug IDs: CSCvb19750.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco firepower management center 6.0.1

cisco firepower management center 6.2.1

cisco firepower management center 6.1.0

cisco firepower management center 6.2.0

cisco firepower management center 6.2.2

cisco firepower management center 6.2.3

cisco firepower appliance 8360 firmware 6.0.1

cisco firepower appliance 8360 firmware 6.1.0

cisco firepower appliance 8360 firmware 6.2.0

cisco firepower appliance 8360 firmware 6.2.1

cisco firepower appliance 8360 firmware 6.2.2

cisco firepower appliance 8360 firmware 6.2.3

cisco firepower management center 2500 firmware 6.0.1

cisco firepower management center 2500 firmware 6.1.0

cisco firepower management center 2500 firmware 6.2.0

cisco firepower management center 2500 firmware 6.2.1

cisco firepower management center 2500 firmware 6.2.2

cisco firepower management center 2500 firmware 6.2.3

cisco firepower appliance 8120 firmware 6.0.1

cisco firepower appliance 8120 firmware 6.1.0

cisco firepower appliance 8120 firmware 6.2.0

cisco firepower appliance 8120 firmware 6.2.1

cisco firepower appliance 8120 firmware 6.2.2

cisco firepower appliance 8120 firmware 6.2.3

cisco firepower appliance 8260 firmware 6.0.1

cisco firepower appliance 8260 firmware 6.1.0

cisco firepower appliance 8260 firmware 6.2.0

cisco firepower appliance 8260 firmware 6.2.1

cisco firepower appliance 8260 firmware 6.2.2

cisco firepower appliance 8260 firmware 6.2.3

cisco firepower appliance 7050 firmware 6.0.1

cisco firepower appliance 7050 firmware 6.1.0

cisco firepower appliance 7050 firmware 6.2.0

cisco firepower appliance 7050 firmware 6.2.1

cisco firepower appliance 7050 firmware 6.2.2

cisco firepower appliance 7050 firmware 6.2.3

cisco firepower appliance 8130 firmware 6.0.1

cisco firepower appliance 8130 firmware 6.1.0

cisco firepower appliance 8130 firmware 6.2.0

cisco firepower appliance 8130 firmware 6.2.1

cisco firepower appliance 8130 firmware 6.2.2

cisco firepower appliance 8130 firmware 6.2.3

cisco firepower appliance 8140 firmware 6.0.1

cisco firepower appliance 8140 firmware 6.1.0

cisco firepower appliance 8140 firmware 6.2.0

cisco firepower appliance 8140 firmware 6.2.1

cisco firepower appliance 8140 firmware 6.2.2

cisco firepower appliance 8140 firmware 6.2.3

cisco firepower appliance 8350 firmware 6.0.1

cisco firepower appliance 8350 firmware 6.1.0

cisco firepower appliance 8350 firmware 6.2.0

cisco firepower appliance 8350 firmware 6.2.1

cisco firepower appliance 8350 firmware 6.2.2

cisco firepower appliance 8350 firmware 6.2.3

cisco amp 8150 firmware 6.0.1

cisco amp 8150 firmware 6.1.0

cisco amp 8150 firmware 6.2.0

cisco amp 8150 firmware 6.2.1

cisco amp 8150 firmware 6.2.2

cisco amp 8150 firmware 6.2.3

cisco amp 7150 firmware 6.0.1

cisco amp 7150 firmware 6.1.0

cisco amp 7150 firmware 6.2.0

cisco amp 7150 firmware 6.2.1

cisco amp 7150 firmware 6.2.2

cisco amp 7150 firmware 6.2.3

cisco firepower appliance 8270 firmware 6.0.1

cisco firepower appliance 8270 firmware 6.1.0

cisco firepower appliance 8270 firmware 6.2.0

cisco firepower appliance 8270 firmware 6.2.1

cisco firepower appliance 8270 firmware 6.2.2

cisco firepower appliance 8270 firmware 6.2.3

cisco ngips virtual appliance 6.1.0

cisco ngips virtual appliance 6.2.0

cisco ngips virtual appliance 6.2.1

cisco ngips virtual appliance 6.2.2

cisco ngips virtual appliance 6.2.3

cisco ngips virtual appliance 6.0.1

cisco firepower appliance 8390 firmware 6.0.1

cisco firepower appliance 8390 firmware 6.1.0

cisco firepower appliance 8390 firmware 6.2.0

cisco firepower appliance 8390 firmware 6.2.1

cisco firepower appliance 8390 firmware 6.2.2

cisco firepower appliance 8390 firmware 6.2.3

cisco firepower management center 4500 firmware 6.0.1

cisco firepower management center 4500 firmware 6.1.0

cisco firepower management center 4500 firmware 6.2.0

cisco firepower management center 4500 firmware 6.2.1

cisco firepower management center 4500 firmware 6.2.2

cisco firepower management center 4500 firmware 6.2.3

cisco firepower appliance 8250 firmware 6.0.1

cisco firepower appliance 8250 firmware 6.1.0

cisco firepower appliance 8250 firmware 6.2.0

cisco firepower appliance 8250 firmware 6.2.1

cisco firepower appliance 8250 firmware 6.2.2

cisco firepower appliance 8250 firmware 6.2.3

cisco firesight management center 750 firmware 6.0.1

cisco firesight management center 750 firmware 6.1.0

cisco firesight management center 750 firmware 6.2.0

cisco firesight management center 750 firmware 6.2.1

cisco firesight management center 750 firmware 6.2.2

cisco firesight management center 750 firmware 6.2.3

cisco firepower appliance 8370 firmware 6.0.1

cisco firepower appliance 8370 firmware 6.1.0

cisco firepower appliance 8370 firmware 6.2.0

cisco firepower appliance 8370 firmware 6.2.1

cisco firepower appliance 8370 firmware 6.2.2

cisco firepower appliance 8370 firmware 6.2.3

cisco firepower appliance 7120 firmware 6.0.1

cisco firepower appliance 7120 firmware 6.1.0

cisco firepower appliance 7120 firmware 6.2.0

cisco firepower appliance 7120 firmware 6.2.1

cisco firepower appliance 7120 firmware 6.2.2

cisco firepower appliance 7120 firmware 6.2.3

cisco firepower appliance 7010 firmware 6.0.1

cisco firepower appliance 7010 firmware 6.1.0

cisco firepower appliance 7010 firmware 6.2.0

cisco firepower appliance 7010 firmware 6.2.1

cisco firepower appliance 7010 firmware 6.2.2

cisco firepower appliance 7010 firmware 6.2.3

cisco firepower management center 4000 firmware 6.0.1

cisco firepower management center 4000 firmware 6.1.0

cisco firepower management center 4000 firmware 6.2.0

cisco firepower management center 4000 firmware 6.2.1

cisco firepower management center 4000 firmware 6.2.2

cisco firepower management center 4000 firmware 6.2.3

cisco firepower appliance 8290 firmware 6.0.1

cisco firepower appliance 8290 firmware 6.1.0

cisco firepower appliance 8290 firmware 6.2.0

cisco firepower appliance 8290 firmware 6.2.1

cisco firepower appliance 8290 firmware 6.2.2

cisco firepower appliance 8290 firmware 6.2.3

cisco firesight management center 1500 firmware 6.0.1

cisco firesight management center 1500 firmware 6.1.0

cisco firesight management center 1500 firmware 6.2.0

cisco firesight management center 1500 firmware 6.2.1

cisco firesight management center 1500 firmware 6.2.2

cisco firesight management center 1500 firmware 6.2.3

cisco firepower management center 1000 firmware 6.0.1

cisco firepower management center 1000 firmware 6.1.0

cisco firepower management center 1000 firmware 6.2.0

cisco firepower management center 1000 firmware 6.2.1

cisco firepower management center 1000 firmware 6.2.2

cisco firepower management center 1000 firmware 6.2.3

cisco firesight management center 3500 firmware 6.0.1

cisco firesight management center 3500 firmware 6.1.0

cisco firesight management center 3500 firmware 6.2.0

cisco firesight management center 3500 firmware 6.2.1

cisco firesight management center 3500 firmware 6.2.2

cisco firesight management center 3500 firmware 6.2.3

cisco firepower appliance 7125 firmware 6.0.1

cisco firepower appliance 7125 firmware 6.1.0

cisco firepower appliance 7125 firmware 6.2.0

cisco firepower appliance 7125 firmware 6.2.1

cisco firepower appliance 7125 firmware 6.2.2

cisco firepower appliance 7125 firmware 6.2.3

cisco firepower appliance 7020 firmware 6.0.1

cisco firepower appliance 7020 firmware 6.1.0

cisco firepower appliance 7020 firmware 6.2.0

cisco firepower appliance 7020 firmware 6.2.1

cisco firepower appliance 7020 firmware 6.2.2

cisco firepower appliance 7020 firmware 6.2.3

cisco firepower appliance 7030 firmware 6.0.1

cisco firepower appliance 7030 firmware 6.1.0

cisco firepower appliance 7030 firmware 6.2.0

cisco firepower appliance 7030 firmware 6.2.1

cisco firepower appliance 7030 firmware 6.2.2

cisco firepower appliance 7030 firmware 6.2.3

cisco firepower appliance 7110 firmware 6.0.1

cisco firepower appliance 7110 firmware 6.1.0

cisco firepower appliance 7110 firmware 6.2.0

cisco firepower appliance 7110 firmware 6.2.1

cisco firepower appliance 7110 firmware 6.2.2

cisco firepower appliance 7110 firmware 6.2.3

cisco firepower management center 2000 firmware 6.0.1

cisco firepower management center 2000 firmware 6.1.0

cisco firepower management center 2000 firmware 6.2.0

cisco firepower management center 2000 firmware 6.2.1

cisco firepower management center 2000 firmware 6.2.2

cisco firepower management center 2000 firmware 6.2.3

cisco firepower management center virtual appliance 6.1.0

cisco firepower management center virtual appliance 6.2.0

cisco firepower management center virtual appliance 6.2.1

cisco firepower management center virtual appliance 6.2.2

cisco firepower management center virtual appliance 6.2.3

cisco firepower management center virtual appliance 6.0.1

cisco firepower appliance 7115 firmware 6.0.1

cisco firepower appliance 7115 firmware 6.1.0

cisco firepower appliance 7115 firmware 6.2.0

cisco firepower appliance 7115 firmware 6.2.1

cisco firepower appliance 7115 firmware 6.2.2

cisco firepower appliance 7115 firmware 6.2.3

Vendor Advisories

Cisco: Cisco Firepower Management Center Cross-Site Request Forgery Vulnerability
A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device The vulnerability is due to insufficient CSRF protections for the web-based management interface of the ...

References

CWE-352https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-firepower-csrfhttp://www.securityfocus.com/bid/104519https://nvd.nist.govhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-firepower-csrf
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflowtype confusionserver-side request forgeryCVE-2024-38440CVE-2024-27801CVE-2024-5868CVE-2024-0582CVE-2024-37643CVE-2024-3105
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook