CVE-2024-20482: Cisco Firepower Management Center: vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to elevate privileges on an affected device
This Cisco advisory covers CVE-2024-20482 in Secure Firewall Management Center (FMC) Appliances.
- CVE-2024-20482
Key facts
- Vendor rating
- Medium, CVSS 6.5
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N· base score 6.5, scored by ciscoAttack vector: network. Attack complexity: low. Privileges required: low. User interaction: none. Scope: unchanged. Confidentiality impact: none. Integrity impact: high. Availability impact: none.- Weakness
- CWE-863 Incorrect Authorization
- CISA SSVC
- Exploitation: none observed. Automatable: no. Technical impact: total. CISA, .
- CISA KEV
- Not listed (catalogue checked )
- Affected
- Scope: At the time of publication, this vulnerability affected Cisco FMC Software if it was configured with custom read-only roles.
- Source published
- Source revised
- Listed by VulniPulse
Compiled by VulniPulse from the linked sources. How records are collected and checked.
Affected products & platforms
Description
A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to elevate privileges on an affected device.
The flaw is caused by insufficient validation of role permissions in part of the web-based management interface. A successful exploit could allow the attacker to modify certain parts of the configuration.
Affected product named by the advisory: Secure Firewall Management Center (FMC) Appliances.
Text from the source record.
- Scope: At the time of publication, this vulnerability affected Cisco FMC Software if it was configured with custom read-only roles.
Official advisory · high-confidence parse· fetched ·verify at source
How to fix CVE-2024-20482
Workaround status
- There are no workarounds that address this vulnerability.
More Cisco advisories
CVE-2026-20316Jul 29, 2026Cisco Secure Firewall Management Center Software Static Credential VulnerabilityCVE-2026-76506Nov 4, 2026Cisco UCS Central Software Remote Code Execution VulnerabilityCVE-2026-20241Nov 4, 2026Cisco Identity Services Engine Authorization Bypass VulnerabilityCVE-2026-76419Nov 4, 2026Cisco Unified Communications Manager Cross-Site Scripting VulnerabilityCVE-2026-76418Oct 28, 2026Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseCVE-2026-20241Oct 28, 2026Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
Get an email when Cisco Firewalls publishes the next one.
See Cisco Firewalls's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future Cisco CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
