BugZero | Cisco BugID CSCwk07982 - Cisco FTD Software for Firepower 1000, 2100, 3100,...

Cisco - Defect ID: CSCwk07982

Cisco FTD Software for Firepower 1000, 2100, 3100, and 4200 Series Static Credential Vuln

Cisco - Defect ID: CSCwk07982

Cisco FTD Software for Firepower 1000, 2100, 3100, and 4200 Series Static Credential Vuln

Last updated on February 19th, 2026

BugZero Risk Score
9.5 High

Overall: 9.5

Severity: 10.0

Lifecycle: 9.1

Popularity: 5.1

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Learn more

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

Learn more

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Learn more

Bug Details

Description

Symptom

A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an affected system using static credentials. This vulnerability is due to the presence of static accounts with hard-coded passwords on an affected system. An attacker could exploit this vulnerability by logging in to the CLI of an affected device with these credentials. A successful exploit could allow the attacker to access the affected system and retrieve sensitive information, perform limited troubleshooting actions, modify some configuration options, or render the device unable to boot to the operating system, requiring a reimage of the device. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-statcred-dFC8tXT5 The Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.

Conditions

Please refer to the Security Advisory.

Workaround

Please refer to the Security Advisory.

Further Problem Description

Please refer to the Security Advisory.

PSIRT Evaluation

The Cisco PSIRT has assigned this bug the following CVSS version 3 score. The Base CVSS score as of the time of evaluation is 9.3: https://sec.cloudapps.cisco.com/security/center/cvssCalculator.x?vector=CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE ID CVE-2024-20412 has been assigned to document this issue. Additional information on Cisco's security vulnerability policy can be found at the following URL: https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html

Change history

2026-01-08 Added: 7.1.0, 7.1.0.1, 7.1.0.2, 7.1.0.3, 7.2.0, 7.2.0.1, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.4.1, 7.2.5, 7.2.5.1, 7.2.5.2, 7.2.6, 7.2.7, 7.3.0, 7.3.1, 7.3.1.1, 7.3.1.2, 7.4.0, 7.4.1, 7.4.1.1

Relevant Products

Click on a version to see all relevant bugs

Affected versions:7.1.0, 7.1.0.1, 7.1.0.2, 7.1.0.3, 7.2.0, 7.2.0.1, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.4.1, 7.2.5, 7.2.5.1, 7.2.5.2, 7.2.6, 7.2.7, 7.3.0, 7.3.1, 7.3.1.1, 7.3.1.2, 7.4.0, 7.4.1, 7.4.1.1

Fixed versions: 10.0.0, 7.2.10, 7.2.10.2, 7.2.11, 7.2.8, 7.2.8.1, 7.2.9, 7.4.2, 7.4.2.1, 7.4.2.2, 7.4.2.3, 7.4.2.4, 7.4.3, 7.4.4, 7.6.0, 7.6.1, 7.6.2, 7.6.2.1, 7.6.4, 7.7.0, 7.7.10, 7.7.10.1, 7.7.11

Relevant Products

Click on a version to see all relevant bugs

Affected versions:7.1.0, 7.1.0.1, 7.1.0.2, 7.1.0.3, 7.2.0, 7.2.0.1, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.4.1, 7.2.5, 7.2.5.1, 7.2.5.2, 7.2.6, 7.2.7, 7.3.0, 7.3.1, 7.3.1.1, 7.3.1.2, 7.4.0, 7.4.1, 7.4.1.1

Fixed versions: 10.0.0, 7.2.10, 7.2.10.2, 7.2.11, 7.2.8, 7.2.8.1, 7.2.9, 7.4.2, 7.4.2.1, 7.4.2.2, 7.4.2.3, 7.4.2.4, 7.4.3, 7.4.4, 7.6.0, 7.6.1, 7.6.2, 7.6.2.1, 7.6.4, 7.7.0, 7.7.10, 7.7.10.1, 7.7.11

Top Cisco Defects

9.7Defect ID: CSCvx82406
Memory leaks in IOS_PRIV_OPER_DB
9.7Defect ID: CSCwf37271
cnssdaemon.log fills up flash partition 2, preventing AP upgrades
9.7Defect ID: CSCwi93213
9800 WLC marked "AAA Server Down" after switchover when using key 6 password encryption
9.7Defect ID: CSCwt50498
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
9.7Defect ID: CSCvz07394
2960X Stack may observe hang/freeze of member switches or complete stack.

Ready to prevent the next vendor outage?

Get a demo

Cisco - Defect ID: CSCwk07982

Cisco FTD Software for Firepower 1000, 2100, 3100, and 4200 Series Static Credential Vuln

Cisco - Defect ID: CSCwk07982

Cisco FTD Software for Firepower 1000, 2100, 3100, and 4200 Series Static Credential Vuln

Last updated on February 19th, 2026

BugZero Risk Score9.5 High

Bug Details

Symptom

Conditions

Workaround

Further Problem Description

PSIRT Evaluation

Top Cisco Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
9.5 High