Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco’s Secure Firewall Management Center (FMC) Software. Current public evidence does not establish active exploitation, so the disclosure should be treated as an exposure to validate rather than evidence that every affected installation has been compromised. The significance for defenders depends on whether the organizations, technologies or attack path described in the reporting overlap with their own environment. Inventory affected products and versions. Additional reporting may change the picture as affected organizations, researchers or authorities publish more evidence.

Current public evidence does not establish active exploitation, so the disclosure should be treated as an exposure to validate rather than evidence that every affected installation has been compromised.

Active exploitation is reported in the current sources reviewed.

The main concern is the security exposure created by the affected technology.

Inventory affected products and versions.