{"document":{"aggregate_severity":{"text":"kritisch"},"category":"csaf_base","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"de-DE","notes":[{"category":"legal_disclaimer","text":"Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."},{"category":"description","text":"Das Cisco Secure Firewall Management Center ist eine zentralisierte Plattform, die eine Verwaltung und Überwachung von Cisco Firewall-Geräten ermöglicht.\r\nCisco Secure Firewall Threat Defense ist eine Sicherheitslösung, die Funktionen wie Firewall, Intrusion Prevention und erweiterten Malware-Schutz in einer einzigen Appliance integriert.","title":"Produktbeschreibung"},{"category":"summary","text":"Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Secure Firewall Management Center und Cisco Secure Firewall Threat Defense ausnutzen, um Root-Rechte zu erlangen, beliebigen Code mit Root-Rechten auszuführen, SQL-Injection durchzuführen und vertrauliche Daten offenzulegen sowie Daten zu manipulieren.","title":"Angriff"},{"category":"general","text":"- CISCO Appliance","title":"Betroffene Betriebssysteme"}],"publisher":{"category":"other","contact_details":"csaf-provider@cert-bund.de","name":"Bundesamt für Sicherheit in der Informationstechnik","namespace":"https://www.bsi.bund.de"},"references":[{"category":"self","summary":"WID-SEC-W-2026-0610 - CSAF Version","url":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0610.json"},{"category":"self","summary":"WID-SEC-2026-0610 - Portal Version","url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0610"},{"category":"external","summary":"Cisco Security Bulletin vom 2026-03-04","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inject-S9ZM4EJf"},{"category":"external","summary":"Cisco Security Bulletin vom 2026-03-04","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh"},{"category":"external","summary":"Cisco Security Bulletin vom 2026-03-04","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-sql-injection-2qH6CcJd"},{"category":"external","summary":"Cisco Security Bulletin vom 2026-03-04","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftdfmc-dir-trav-wERgjhWq"},{"category":"external","summary":"Cisco Security Bulletin vom 2026-03-04","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2"},{"category":"external","summary":"AWS Security Blog vom 2026-03-18","url":"https://aws.amazon.com/de/blogs/security/amazon-threat-intelligence-teams-identify-interlock-ransomware-campaign-targeting-enterprise-firewalls/"},{"category":"external","summary":"CISA Known Exploited Vulnerabilities Catalog vom 2026-09-13","url":"https://www.cisa.gov/news-events/alerts/2026/09/09/cisa-adds-four-known-exploited-vulnerabilities-catalog"}],"source_lang":"en-US","title":"Cisco Secure Firewall Management Center: Mehrere Schwachstellen","tracking":{"current_release_date":"2026-09-13T22:00:00.000+00:00","generator":{"date":"2026-09-14T06:41:33.771+00:00","engine":{"name":"BSI-WID","version":"1.6.0"}},"id":"WID-SEC-W-2026-0610","initial_release_date":"2026-03-04T23:00:00.000+00:00","revision_history":[{"date":"2026-03-04T23:00:00.000+00:00","number":"1","summary":"Initiale Fassung"},{"date":"2026-03-18T23:00:00.000+00:00","number":"2","summary":"CVE-2026-20131 wird ausgenutzt"},{"date":"2026-09-09T22:00:00.000+00:00","number":"3","summary":"Aktive Ausnutzung gemeldet"},{"date":"2026-09-13T22:00:00.000+00:00","number":"4","summary":"CVE-2026-20079 laut CISA ausgenutzt"}],"status":"final","version":"4"}},"product_tree":{"branches":[{"branches":[{"category":"product_name","name":"Cisco Secure Firewall Management Center","product":{"name":"Cisco Secure Firewall Management Center","product_id":"T051435","product_identification_helper":{"cpe":"cpe:/a:cisco:secure_firewall_management_center:-"}}},{"category":"product_name","name":"Cisco Secure Firewall Threat Defense","product":{"name":"Cisco Secure Firewall Threat Defense","product_id":"T051447","product_identification_helper":{"cpe":"cpe:/a:cisco:secure_firewall_threat_defense:-"}}}],"category":"vendor","name":"Cisco"}]},"vulnerabilities":[{"cve":"CVE-2026-20001","product_status":{"known_affected":["T051435"]},"release_date":"2026-03-04T23:00:00.000+00:00","title":"CVE-2026-20001"},{"cve":"CVE-2026-20002","product_status":{"known_affected":["T051435"]},"release_date":"2026-03-04T23:00:00.000+00:00","title":"CVE-2026-20002"},{"cve":"CVE-2026-20003","product_status":{"known_affected":["T051435"]},"release_date":"2026-03-04T23:00:00.000+00:00","title":"CVE-2026-20003"},{"cve":"CVE-2026-20079","product_status":{"known_affected":["T051435"]},"release_date":"2026-03-04T23:00:00.000+00:00","title":"CVE-2026-20079"},{"cve":"CVE-2026-20131","product_status":{"known_affected":["T051435"]},"release_date":"2026-03-04T23:00:00.000+00:00","title":"CVE-2026-20131"},{"cve":"CVE-2026-20044","product_status":{"known_affected":["T051435"]},"release_date":"2026-03-04T23:00:00.000+00:00","title":"CVE-2026-20044"},{"cve":"CVE-2026-20018","product_status":{"known_affected":["T051447","T051435"]},"release_date":"2026-03-04T23:00:00.000+00:00","title":"CVE-2026-20018"}]}