Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability

CVE-2026-20316 Medium CVSS 5.3 In-The-Wild Exploited Ransomware Known
Beranda Advisories CVE-2026-20316

Ringkasan Kerentanan (Vulnerability Overview)

Rilis: 01 October 2026
Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.

Tindakan Mitigasi yang Wajib Diterapkan (Required Action)

Instruksi Keamanan untuk Pengelola TI / OPD
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Seluruh pengelola server dan aplikasi di lingkungan OPD Kabupaten Ciamis diimbau untuk segera mengaudit perangkat terdampak dan mengaplikasikan patch sebelum batas waktu mitigasi.

Produk & Versi Terdampak

Produk Versi Basis Batas Terdampak Status Keamanan
Cisco Secure Firewall Management Center (FMC) 7.0.0 — AFFECTED
Cisco Secure Firewall Management Center (FMC) 7.0.0.1 — AFFECTED
Cisco Secure Firewall Management Center (FMC) 7.0.1 — AFFECTED
Cisco Secure Firewall Management Center (FMC) 7.0.1.1 — AFFECTED
Cisco Secure Firewall Management Center (FMC) 7.0.2 — AFFECTED
Cisco Secure Firewall Management Center (FMC) 7.2.0 — AFFECTED
Cisco Secure Firewall Management Center (FMC) 7.0.2.1 — AFFECTED
Cisco Secure Firewall Management Center (FMC) 7.0.3 — AFFECTED
Cisco Secure Firewall Management Center (FMC) 7.2.0.1 — AFFECTED
Cisco Secure Firewall Management Center (FMC) 7.0.4 — AFFECTED

Threat Intelligence Matrix

CVE Identifier
CVE-2026-20316
Vendor / Project Cisco
Produk Terdampak Secure Firewall Management Center (FMC)
Skor CVSS
5.3 / 10.0
Status Eksploitasi AKTIF (In-The-Wild)
Kampanye Ransomware Teridentifikasi (Known)
Automatable (Wormable) Unknown
Dampak Teknis Total
Sumber Intelijen CISA KEV

Butuh Pendampingan Mitigasi?

Tim Ciamiskab-CSIRT siap mendampingi verifikasi kerentanan dan langkah pengamanan aset digital OPD Anda.

Lapor ke CSIRT WhatsApp Hotline CSIRT
CSIRT Assistant
Halo 👋 Ada yang bisa saya bantu? Jika perlu, chat ini bisa diteruskan ke admin.
Scroll