High severity7.2NVD Advisory· Published Oct 2, 2019· Updated Jun 17, 2026

CVE-2019-12690

Description

A vulnerability in the web UI of the Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to inject arbitrary commands that are executed with the privileges of the root user of the underlying operating system. The vulnerability is due to insufficient validation of user-supplied input to the web UI. An attacker could exploit this vulnerability by submitting crafted input in the web UI. A successful exploit could allow an attacker to execute arbitrary commands on the device with full root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Firepower Management Center (FMC) Softwarellm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191002-fmc-com-injnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000