PT-2021-2827 · Cisco · Cisco Firepower Device Manager (Fdm) On-Box

Published 2021-04-28 · Updated 2021-05-05 · CVE-2021-1369

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Device Manager (FDM) On-Box Software (affected versions not specified)

Description: A vulnerability in the REST API of Cisco Firepower Device Manager (FDM) On-Box Software could allow an authenticated, remote attacker to gain read and write access to information stored on an affected device. This issue is due to the improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this by sending malicious requests containing references in XML entities to an affected system, potentially allowing the retrieval of files from the local system and resulting in the disclosure of sensitive information or a partial denial of service (DoS) condition.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

BDU:2021-02373

CVE-2021-1369

Affected Products

Cisco Firepower Device Manager (Fdm) On-Box

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-1369 · Security Note
• https://bdu.fstec.ru/vul/2021-02373 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fdm-xxe-zR7sxPfs · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1369 · Vendor Advisory
• https://t.me/cvenotify/13946 · Telegram Post