SF
Product
Secure Firewall Management Center
On CISA KEVExploited in the wildRansomware-linked
187
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 57Medium 122Low 0
Watch
Add Secure Firewall Management Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20131 RansomwareIn wildKEV | 10.0 | Mar 4 | Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability Affected: 6.4.0.13; 6.4.0.14; 6.4.0.15; 6.4.0.16; 6.4.0.17; 6.4.0.18; +34 more |
| CVE-2026-20079 In wildKEV | 10.0 | Mar 4 | Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +34 more |
| CVE-2026-20316 RansomwareIn wildKEV | 5.3 | Jul 29 | Cisco Secure Firewall Management Center Software Static Credential Vulnerability Affected: 7.0.0 through 7.0.9; 7.2.0 through 7.2.11; 7.3.0 through 7.3.1.2; 7.4.0 through 7.4.7; 7.6.0 through 7.6.5; 7.7.0 through 7.7.12; +1 more |
| CVE-2025-20265 | 10.0 | Aug 14 | A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject… Affected: 7.0.7; 7.7.0 |
| CVE-2024-20424 | 9.9 | Oct 23 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an… Affected: 6.2.3; 6.2.3.1; 6.2.3.2; 6.2.3.3; 6.2.3.4; 6.2.3.5; +34 more |
| CVE-2023-20048 | 9.9 | Nov 1 | A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute certain unauthorized… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.16; 6.6.0 through 6.6.7.1; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; +2 more |
| CVE-2019-16028 | 9.8 | Sep 23 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to bypass authentication and… Affected: before 6.2.3.16; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.7; 6.5.0 before 6.5.0.2 |
| CVE-2020-3318 | 9.8 | May 6 | Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an… Affected: 2.0.3; 2.1.0; 2.1.1; 2.2.0; 2.3.0; 5.0.0; +7 more |
| CVE-2024-20360 | 8.8 | May 22 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +21 more |
| CVE-2023-20220 | 8.8 | Nov 1 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.16; 6.6.0 through 6.6.7.1; 6.7.0 through 6.7.0.3; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; +2 more |
| CVE-2023-20219 | 8.8 | Nov 1 | Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.16; 6.6.0 through 6.6.7.1; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.3.1; +1 more |
| CVE-2022-20926 | 8.8 | Nov 15 | A vulnerability in the web management interface of the Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands… Affected: 7.0.0; 7.0.0.1; 7.0.1; 7.0.1.1; 7.0.2; 7.0.2.1; +5 more |
| CVE-2022-20743 | 8.8 | May 3 | A vulnerability in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to bypass security protections… Affected: before 6.4.0.15; 6.5.0 before 6.6.5.2; 6.7.0 before 7.0.2; 7.1.0 before 7.1.0.1 |
| CVE-2019-12689 | 8.8 | Oct 2 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary code… Affected: before 6.2.2.2 |
| CVE-2019-12688 | 8.8 | Oct 2 | A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device Affected: 6.2.2 |
| CVE-2019-12687 | 8.8 | Oct 2 | A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to execute arbitrary commands on an affected device Affected: 6.2.2; 6.2.3 |
| CVE-2019-12686 | 8.8 | Oct 2 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute… Affected: 6.2.3; 6.3.0 |
| CVE-2019-12685 | 8.8 | Oct 2 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute… Affected: 6.2.2 |
| CVE-2019-12684 | 8.8 | Oct 2 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute… Affected: 6.2.0; 6.2.2; 6.2.3 |
| CVE-2019-12683 | 8.8 | Oct 2 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute… Affected: 6.0.0; 6.1.0; 6.2.0; 6.2.2; 6.2.3 |
| CVE-2019-12682 | 8.8 | Oct 2 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute… Affected: 6.2.2 |
| CVE-2019-12681 | 8.8 | Oct 2 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute… Affected: 6.0.0; 6.2.0; 6.2.1; 6.2.2 |
| CVE-2019-12680 | 8.8 | Oct 2 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute… Affected: 6.2.2; 6.2.3 |
| CVE-2019-12679 | 8.8 | Oct 2 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute… Affected: 6.2.2 |
| CVE-2018-0365 | 8.8 | Jun 21 | A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery… Affected: 6.0.1; 6.1.0; 6.2.0; 6.2.1; 6.2.2; 6.2.3 |
| CVE-2016-6433 | 8.8 | Oct 6 | The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application… Affected: 5.2.0; 5.3.0; 5.3.0.2; 5.3.0.3; 5.3.0.4; 5.3.1; +14 more |
| CVE-2016-1458 | 8.8 | Aug 18 | The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA)… Affected: 4.10.3; 5.2.0; 5.3.0; 5.3.1; 5.4.0 |
| CVE-2016-1457 | 8.8 | Aug 18 | The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices… Affected: 4.10.3.9; 5.2.0; 5.3.0.4; 5.3.1; 5.4.0 |
| CVE-2021-34749 | 8.6 | Aug 18 | A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), and the Snort detection engine… Affected: 2.9.18 |
| CVE-2020-3499 | 8.6 | Oct 21 | A vulnerability in the licensing service of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Affected: 6.2.3; 6.3.0; 6.4.0; 6.5.0 |
| CVE-2018-0383 | 8.6 | Jul 16 | A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the… Affected: 6.2.2.1; 6.2.3; 6.3.0 |
| CVE-2018-0233 | 8.6 | Apr 19 | A vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the detection engine in Cisco Firepower System Software could allow an unauthenticated, remote… Affected: 5.4.0; 6.0.0; 6.1.0; 6.2.0; 6.2.1 |
| CVE-2017-12245 | 8.6 | Oct 5 | A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause depletion of system memory,… Affected: 6.0.1; 6.0.1.3; 6.1.0; 6.1.0.3; 6.1.0.6; 6.2.0; +3 more |
| CVE-2017-12244 | 8.6 | Oct 5 | A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause high CPU utilization… Affected: 6.0.0; 6.0.0.0; 6.0.0.1; 6.0.1; 6.0.1.3; 6.1.0; +6 more |
| CVE-2016-6368 | 8.6 | Apr 20 | A vulnerability in the detection engine parsing of Pragmatic General Multicast (PGM) protocol packets for Cisco Firepower System Software could allow an unauthenticated, remote… Affected: 6.0.0; 6.0.0.0; 6.0.0.1; 6.0.1 |
| CVE-2025-20148 | 8.5 | Aug 14 | A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to inject arbitrary… Affected: 7.0.6; 7.0.6.1; 7.0.6.2; 7.0.6.3; 7.2.4; 7.2.4.1; +13 more |
| CVE-2023-20063 | 8.2 | Nov 1 | A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devices that are running Cisco… Affected: 6.2.3 through 6.2.3.18; 6.4.0 through 6.4.0.16; 6.6.0 through 6.6.7.1; 7.0.0 through 7.0.5; 7.1.0 through 7.1.0.3; 7.3.0 through 7.3.1.1 |
| CVE-2026-20002 | 8.1 | Mar 4 | A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected… Affected: 6.4.0 through 6.4.0.18; 7.0.0 through 7.0.8.1; 7.1.0 through 7.1.0.3; 7.2.0 through 7.2.10.2; 7.3.0 through 7.3.1.2; 7.4.0 through 7.4.3; +2 more |
| CVE-2020-3550 | 8.1 | Oct 21 | A vulnerability in the sfmgr daemon of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote… Affected: through 6.0.1; 6.3.0 before 6.3.0.6; 6.4.0 before 6.4.0.10; 6.2.0; 6.2.1 |
| CVE-2020-3549 | 8.1 | Oct 21 | A vulnerability in the sftunnel functionality of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: before 6.6.1 |
| CVE-2020-3410 | 8.1 | Oct 21 | A vulnerability in the Common Access Card (CAC) authentication feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to… Affected: 6.6.0; 6.6.0.1 |
| CVE-2020-3302 | 8.1 | May 6 | A vulnerability in the web UI of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to overwrite files on the file system of an… Affected: before 6.2.2.2 |
| CVE-2019-1709 | 7.8 | May 3 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack Affected: 6.3.0 |
| CVE-2019-1699 | 7.8 | May 3 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack Affected: before 6.2.3.12 |
| CVE-2016-6434 | 7.8 | Oct 6 | Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitive information by leveraging CLI access, aka Bug ID… Affected: 6.0.1 |
| CVE-2022-20918 | 7.5 | Nov 15 | A vulnerability in the Simple Network Management Protocol (SNMP) access controls for Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module, Cisco… Affected: 7.0.0 before 7.0.5 |
| CVE-2022-20854 | 7.5 | Nov 15 | A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,… Affected: 6.1.0 through 6.1.0.7; 6.2.0 through 6.2.0.6; 6.2.2 through 6.2.2.5; 6.2.3 through 6.2.3.18; 6.3.0 through 6.3.0.5; 6.4.0 through 6.4.0.15; +19 more |
| CVE-2021-40116 | 7.5 | Oct 27 | Multiple Cisco products are affected by a vulnerability in Snort rules that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an… Affected: 3.1.0.1 |
| CVE-2021-40114 | 7.5 | Oct 27 | Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic that could allow an unauthenticated, remote attacker to cause… Affected: 2.9.14.0; 2.9.15; 2.9.16; 2.9.17 |
| CVE-2021-34754 | 7.5 | Oct 27 | Multiple vulnerabilities in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an… Affected: 2.9.12; 2.9.14.0; 2.9.16; 2.9.17; 2.9.18 |