Description
Cisco Firepower Management Center存在命令注入漏洞，此漏洞是由于devicerecords接口对用户的请求验证不当导致的。
Cisco Firepower Management Center CVE-2023-20048 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2023-20048
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-29MP49hN
https://www.cve.org/CVERecord?id=CVE-2023-20048
https://threatprotect.qualys.com/2023/11/03/cisco-firepower-management-center-fmc-software-command-injection-vulnerability-cve-2023-20048/
https://github.com/absholi7ly/Cisco-Firepower-Management-Center-Exploit
https://www.exploit-db.com/exploits/51881
https://www.sentinelone.com/vulnerability-database/cve-2023-20048/
https://cve.imfht.com/detail/CVE-2023-20048
https://fortiguard.fortinet.com/encyclopedia/ips/55759
https://www.inetms.co.th/article-151035-cisco-firepower-management-center-software-command-injection.html