CVE-2024-20412CWE-259CWE-798hardcoded-credentials

CVE-2024-20412

Critical Β· published October 23, 2024

CVSS v3.1
9.3
EPSS
0%
Percentile
11.1
In the wild
Unconfirmed
What it is

🚨 A local attacker could waltz right in and take control of your Cisco Firepower systems using static credentials! πŸ”₯ Think of it like a restaurant kitchen with a front door left wide open and all the staff are using the same outdated access code. Anyone can stroll in, grab a knife, and start cooking up trouble! If exploited, this vulnerability could allow an attacker to access sensitive information, tweak configurations, or even bring your device crashing down to a halt, requiring a complete reimage! The potential chaos from this could be absolutely devastating!

Put simply

Think of it like a restaurant kitchen with a front door left wide open and all the staff are using the same outdated access code. Anyone can stroll in, grab a knife, and start cooking up trouble! This critical vulnerability arises from hard-coded static accounts in the Cisco Firepower Threat Defense Software. An attacker can simply log into the Command Line Interface (CLI) using these credentials, gaining unauthorized access to the system.

What to do

If exploited, this vulnerability could allow an attacker to access sensitive information, tweak configurations, or even bring your device crashing down to a halt, requiring a complete reimage! The potential chaos from this could be absolutely devastating! Immediately update to the latest version of Cisco FTD Software to patch this vulnerability. It's crucial to audit your configurations and remove or rename any static accounts to safeguard against unauthorized access. Don't forget to reinforce your access controls! You've got this! With the right steps, you can shore up your defenses and keep your systems secure! πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
9.3 Β· CRITICAL
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00214 Β· 11.1th percentile
Weaknesses
CWE-259 Β· Use of Hard-coded Password; CWE-798 Β· Use of Hard-coded Credentials
Published
2024-10-23T22:15Z
Affected products (23)
ProductVersionsFixed in
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
cisco/secure_firewall_threat_defenseall versionsβ€”
References (1)
EPSS history
Timeline
  • 23 OCT 17:39Z
    A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local…
    cvelistv5