Re: OpenSSH regreSSHion vulnerability in FMC

Arthur Martez · ‎10-09-2024

Hello.

Do anyone knows if vulnerability CVE-2024-6387 affects Cisco Secure Firewall Management Center (FMC) VIRTUAL?

I've been looking into the security advisory (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssh-rce-2024) and the bug tool (https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwk62296) but I can't select the option in the list dispalyed.

Actual version:

Version 7.2.4 (build 169)

Thank you!

marce1000 · ‎10-10-2024

- You could find out with : https://github.com/asterictnl-lvdw/CVE-2024-6387

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Marvin Rhoads · ‎10-10-2024

That bug is fixed in 7.2.8.1 in the 7.2 train.

Reference:

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/release-notes/threat-defense/720/threat-defense-release-notes-72.html

The current suggested release is 7.4.2 and it also includes the fix:

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/release-notes/threat-defense/740/threat-defense-release-notes-74.html