PT-2021-2825 · Cisco · Cisco Firepower Management Center

Published 2021-04-28 · Updated 2024-11-26 · CVE-2021-1477

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center (FMC) Software (affected versions not specified)

Description: The issue is related to insufficient enforcement of access control in the affected software, allowing an authenticated, remote attacker to access services beyond their authorization. This could enable the attacker to directly access internal services of an affected device, potentially overwriting policies and impacting the device's configuration and operation. An attacker could exploit this to modify, add, or delete data, or gain unauthorized access to protected information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2021-02371

CVE-2021-1477

Affected Products

Cisco Firepower Management Center

References · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-iac-pZDMQ4wC · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1477 · Security Note
• https://bdu.fstec.ru/vul/2021-02371 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1477 · Vendor Advisory