CISCO WARNS OF FMC STATIC CREDENTIAL FLAW EXPLOITED IN ZERO-DAY ATTACKS

Summary from the TLDR InfoSec newsletter

Cisco is warning customers of a vulnerability in its Secure Firewall Management Center (FMC) systems. The vulnerability is due to a low-privilege account that is enabled by default and uses static credentials to authenticate. While the CVE was only given a CVSS score of 5.3, Cisco rates it as a high-severity vulnerability due to other vulnerabilities that an attacker could chain to escalate privileges.