module

Cisco Firepower Management Console 6.0 Post Authentication UserAdd Vulnerability

Try Surface Command
Back to search
Disclosed
Oct 10, 2016
Created
May 30, 2018

Description

This module exploits a vulnerability found in Cisco Firepower Management Console.
The management system contains a configuration flaw that allows the www user to
execute the useradd binary, which can be abused to create backdoor accounts.
Authentication is required to exploit this vulnerability.

Authors

Matt
sinn3r [email protected]

Platform

Linux

Architectures

x86

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


    msf > use exploit/linux/http/cisco_firepower_useradd
    msf exploit(cisco_firepower_useradd) > show targets
        ...targets...
    msf exploit(cisco_firepower_useradd) > set TARGET < target-id >
    msf exploit(cisco_firepower_useradd) > show options
        ...show and set options...
    msf exploit(cisco_firepower_useradd) > exploit
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.