CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20388

A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names on an affected device. This vulnerability is due to improper authentication of password update responses. An attacker could exploit this vulnerability by forcing a password reset on an affected device. A successful exploit could allow the attacker to determine valid user names in the unauthenticated response to a forced password reset.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.5%

CVSS Severity

CVSS v3 Score 5.3

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-infodisc-RL4mJFer

Products affected by CVE-2024-20388

Cisco » Firepower Management Center » Version: 6.4.0.17

cpe:2.3:a:cisco:firepower_management_center:6.4.0.17
Cisco » Firepower Management Center » Version: 6.4.0.18

cpe:2.3:a:cisco:firepower_management_center:6.4.0.18
Cisco » Firepower Management Center » Version: 6.6.7.2

cpe:2.3:a:cisco:firepower_management_center:6.6.7.2
Cisco » Firepower Management Center » Version: 7.0.6.1

cpe:2.3:a:cisco:firepower_management_center:7.0.6.1
Cisco » Firepower Management Center » Version: 7.0.6.2

cpe:2.3:a:cisco:firepower_management_center:7.0.6.2
Cisco » Firepower Management Center » Version: 7.2.5.1

cpe:2.3:a:cisco:firepower_management_center:7.2.5.1
Cisco » Firepower Management Center » Version: 7.2.5.2

cpe:2.3:a:cisco:firepower_management_center:7.2.5.2
Cisco » Firepower Management Center » Version: 7.2.6

cpe:2.3:a:cisco:firepower_management_center:7.2.6
Cisco » Firepower Management Center » Version: 7.2.7

cpe:2.3:a:cisco:firepower_management_center:7.2.7
Cisco » Firepower Management Center » Version: 7.2.8

cpe:2.3:a:cisco:firepower_management_center:7.2.8
Cisco » Firepower Management Center » Version: 7.2.8.1

cpe:2.3:a:cisco:firepower_management_center:7.2.8.1
Cisco » Firepower Management Center » Version: 7.4.0

cpe:2.3:a:cisco:firepower_management_center:7.4.0
Cisco » Firepower Management Center » Version: 7.4.1

cpe:2.3:a:cisco:firepower_management_center:7.4.1
Cisco » Firepower Management Center » Version: 7.4.1.1

cpe:2.3:a:cisco:firepower_management_center:7.4.1.1
Cisco » Firepower Threat Defense » Version: 6.4.0.10

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.10
Cisco » Firepower Threat Defense » Version: 6.4.0.12

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.12
Cisco » Firepower Threat Defense » Version: 6.4.0.14

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.14
Cisco » Firepower Threat Defense » Version: 6.4.0.16

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.16
Cisco » Firepower Threat Defense » Version: 6.4.0.18

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.18
Cisco » Firepower Threat Defense » Version: 6.4.0.4

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.4
Cisco » Firepower Threat Defense » Version: 6.6.5.1

cpe:2.3:a:cisco:firepower_threat_defense:6.6.5.1
Cisco » Firepower Threat Defense » Version: 6.6.7

cpe:2.3:a:cisco:firepower_threat_defense:6.6.7
Cisco » Firepower Threat Defense » Version: 6.7.0.2

cpe:2.3:a:cisco:firepower_threat_defense:6.7.0.2
Cisco » Firepower Threat Defense » Version: 7.1.0.1

cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.1
Cisco » Firepower Threat Defense » Version: 7.1.0.3

cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.3
Cisco » Firepower Threat Defense » Version: 7.2.2

cpe:2.3:a:cisco:firepower_threat_defense:7.2.2
Cisco » Firepower Threat Defense » Version: 7.4.1

cpe:2.3:a:cisco:firepower_threat_defense:7.4.1
Cisco » Secure Firewall Management Center » Version: 6.2.3

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3
Cisco » Secure Firewall Management Center » Version: 6.2.3.1

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.1
Cisco » Secure Firewall Management Center » Version: 6.2.3.10

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.10
Cisco » Secure Firewall Management Center » Version: 6.2.3.11

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.11
Cisco » Secure Firewall Management Center » Version: 6.2.3.12

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.12
Cisco » Secure Firewall Management Center » Version: 6.2.3.13

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.13
Cisco » Secure Firewall Management Center » Version: 6.2.3.14

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.14
Cisco » Secure Firewall Management Center » Version: 6.2.3.15

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.15
Cisco » Secure Firewall Management Center » Version: 6.2.3.16

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.16
Cisco » Secure Firewall Management Center » Version: 6.2.3.17

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.17
Cisco » Secure Firewall Management Center » Version: 6.2.3.18

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.18
Cisco » Secure Firewall Management Center » Version: 6.2.3.2

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.2
Cisco » Secure Firewall Management Center » Version: 6.2.3.3

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.3
Cisco » Secure Firewall Management Center » Version: 6.2.3.4

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.4
Cisco » Secure Firewall Management Center » Version: 6.2.3.5

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.5
Cisco » Secure Firewall Management Center » Version: 6.2.3.6

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.6
Cisco » Secure Firewall Management Center » Version: 6.2.3.7

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.7
Cisco » Secure Firewall Management Center » Version: 6.2.3.8

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.8
Cisco » Secure Firewall Management Center » Version: 6.2.3.9

cpe:2.3:a:cisco:secure_firewall_management_center:6.2.3.9
Cisco » Secure Firewall Management Center » Version: 6.4.0

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0
Cisco » Secure Firewall Management Center » Version: 6.4.0.1

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.1
Cisco » Secure Firewall Management Center » Version: 6.4.0.10

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.10
Cisco » Secure Firewall Management Center » Version: 6.4.0.11

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.11
Cisco » Secure Firewall Management Center » Version: 6.4.0.12

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.12
Cisco » Secure Firewall Management Center » Version: 6.4.0.13

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.13
Cisco » Secure Firewall Management Center » Version: 6.4.0.14

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.14
Cisco » Secure Firewall Management Center » Version: 6.4.0.15

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.15
Cisco » Secure Firewall Management Center » Version: 6.4.0.16

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.16
Cisco » Secure Firewall Management Center » Version: 6.4.0.2

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.2
Cisco » Secure Firewall Management Center » Version: 6.4.0.3

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.3
Cisco » Secure Firewall Management Center » Version: 6.4.0.4

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.4
Cisco » Secure Firewall Management Center » Version: 6.4.0.5

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.5
Cisco » Secure Firewall Management Center » Version: 6.4.0.6

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.6
Cisco » Secure Firewall Management Center » Version: 6.4.0.7

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.7
Cisco » Secure Firewall Management Center » Version: 6.4.0.8

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.8
Cisco » Secure Firewall Management Center » Version: 6.4.0.9

cpe:2.3:a:cisco:secure_firewall_management_center:6.4.0.9
Cisco » Secure Firewall Management Center » Version: 6.6.0

cpe:2.3:a:cisco:secure_firewall_management_center:6.6.0
Cisco » Secure Firewall Management Center » Version: 6.6.0.1

cpe:2.3:a:cisco:secure_firewall_management_center:6.6.0.1
Cisco » Secure Firewall Management Center » Version: 6.6.1

cpe:2.3:a:cisco:secure_firewall_management_center:6.6.1
Cisco » Secure Firewall Management Center » Version: 6.6.3

cpe:2.3:a:cisco:secure_firewall_management_center:6.6.3
Cisco » Secure Firewall Management Center » Version: 6.6.4

cpe:2.3:a:cisco:secure_firewall_management_center:6.6.4
Cisco » Secure Firewall Management Center » Version: 6.6.5

cpe:2.3:a:cisco:secure_firewall_management_center:6.6.5
Cisco » Secure Firewall Management Center » Version: 6.6.5.1

cpe:2.3:a:cisco:secure_firewall_management_center:6.6.5.1
Cisco » Secure Firewall Management Center » Version: 6.6.5.2

cpe:2.3:a:cisco:secure_firewall_management_center:6.6.5.2
Cisco » Secure Firewall Management Center » Version: 6.6.7

cpe:2.3:a:cisco:secure_firewall_management_center:6.6.7
Cisco » Secure Firewall Management Center » Version: 6.6.7.1

cpe:2.3:a:cisco:secure_firewall_management_center:6.6.7.1
Cisco » Secure Firewall Management Center » Version: 6.7.0

cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0
Cisco » Secure Firewall Management Center » Version: 6.7.0.1

cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0.1
Cisco » Secure Firewall Management Center » Version: 6.7.0.2

cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0.2
Cisco » Secure Firewall Management Center » Version: 6.7.0.3

cpe:2.3:a:cisco:secure_firewall_management_center:6.7.0.3
Cisco » Secure Firewall Management Center » Version: 7.0.0

cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0
Cisco » Secure Firewall Management Center » Version: 7.0.0.1

cpe:2.3:a:cisco:secure_firewall_management_center:7.0.0.1
Cisco » Secure Firewall Management Center » Version: 7.0.1

cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1
Cisco » Secure Firewall Management Center » Version: 7.0.1.1

cpe:2.3:a:cisco:secure_firewall_management_center:7.0.1.1
Cisco » Secure Firewall Management Center » Version: 7.0.2

cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2
Cisco » Secure Firewall Management Center » Version: 7.0.2.1

cpe:2.3:a:cisco:secure_firewall_management_center:7.0.2.1
Cisco » Secure Firewall Management Center » Version: 7.0.3

cpe:2.3:a:cisco:secure_firewall_management_center:7.0.3
Cisco » Secure Firewall Management Center » Version: 7.0.4

cpe:2.3:a:cisco:secure_firewall_management_center:7.0.4
Cisco » Secure Firewall Management Center » Version: 7.0.5

cpe:2.3:a:cisco:secure_firewall_management_center:7.0.5
Cisco » Secure Firewall Management Center » Version: 7.0.6

cpe:2.3:a:cisco:secure_firewall_management_center:7.0.6
Cisco » Secure Firewall Management Center » Version: 7.1.0

cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0
Cisco » Secure Firewall Management Center » Version: 7.1.0.1

cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.1
Cisco » Secure Firewall Management Center » Version: 7.1.0.2

cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.2
Cisco » Secure Firewall Management Center » Version: 7.1.0.3

cpe:2.3:a:cisco:secure_firewall_management_center:7.1.0.3
Cisco » Secure Firewall Management Center » Version: 7.2.0

cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0
Cisco » Secure Firewall Management Center » Version: 7.2.0.1

cpe:2.3:a:cisco:secure_firewall_management_center:7.2.0.1
Cisco » Secure Firewall Management Center » Version: 7.2.1

cpe:2.3:a:cisco:secure_firewall_management_center:7.2.1
Cisco » Secure Firewall Management Center » Version: 7.2.2

cpe:2.3:a:cisco:secure_firewall_management_center:7.2.2
Cisco » Secure Firewall Management Center » Version: 7.2.3

cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3
Cisco » Secure Firewall Management Center » Version: 7.2.3.1

cpe:2.3:a:cisco:secure_firewall_management_center:7.2.3.1
Cisco » Secure Firewall Management Center » Version: 7.2.4

cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4
Cisco » Secure Firewall Management Center » Version: 7.2.4.1

cpe:2.3:a:cisco:secure_firewall_management_center:7.2.4.1
Cisco » Secure Firewall Management Center » Version: 7.2.5

cpe:2.3:a:cisco:secure_firewall_management_center:7.2.5
Cisco » Secure Firewall Management Center » Version: 7.3.0

cpe:2.3:a:cisco:secure_firewall_management_center:7.3.0
Cisco » Secure Firewall Management Center » Version: 7.3.1

cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1
Cisco » Secure Firewall Management Center » Version: 7.3.1.1

cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.1
Cisco » Secure Firewall Management Center » Version: 7.3.1.2

cpe:2.3:a:cisco:secure_firewall_management_center:7.3.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-20388

Products

Pricing

Contact Us