{"id":32926,"date":"2020-01-22T22:54:00","date_gmt":"2020-01-22T22:54:00","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/cisco-issues-firewall-sd-wan-security-warnings\/"},"modified":"2020-01-22T22:54:00","modified_gmt":"2020-01-22T22:54:00","slug":"cisco-issues-firewall-sd-wan-security-warnings","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cisco-issues-firewall-sd-wan-security-warnings\/","title":{"rendered":"Cisco issues firewall, SD-WAN security warnings"},"content":{"rendered":"
<\/div>\n

Amongst Cisco\u2019s dump of 27 security advisories<\/a> today only one was rated as critical \u2013 a vulnerability in its Firepower firewall<\/a> system that could let an attacker bypass authentication and execute arbitrary actions with administrative privileges on a particular device.<\/p>\n

The Firepower Management Center (FMC) vulnerability \u2013 which was rated at 9.8 out of 10 \u2013 comes from improper handling of Lightweight Directory Access Protocol (LDAP) authentication responses from an external authentication server. With it, an attacker could exploit the vulnerability by sending crafted HTTP requests to an affected device and gain administrative access to its web-based management interface.<\/p>\n