CVE-2021-1477: falha de média gravidade em Cisco Firepower Management Center
Cisco Firepower Management Center Software Policy Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.7%
A vulnerability in an access control mechanism of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access services beyond the scope of their authorization. This vulnerability is due to insufficient enforcement of access control in the affected software. An attacker could exploit this vulnerability by directly accessing the internal services of an affected device. A successful exploit could allow the attacker to overwrite policies and impact the configuration and operation of the affected device.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
Cisco · Cisco Firepower Management CenterCVEs relacionadas — Cisco Firepower Management Center
No mesmo produto, das mais perigosas para as menos.
CVE-2023-20048CRITICALCVE-2023-20048EPSS 20.9%CVE-2025-20265CRITICALCisco Secure Firewall Management Center Software Radius Remote Code Execution VulnerabilityEPSS 15.9%CVE-2019-12691MEDIUMCisco Firepower Management Center Directory Traversal VulnerabilityEPSS 5.1%CVE-2022-20743MEDIUMCisco Firepower Management Center File Upload Security Bypass VulnerabilityEPSS 4.0%CVE-2019-1642MEDIUMCisco Firepower Management Center Cross-Site Scripting VulnerabilityEPSS 3.9%CVE-2019-12690HIGHCisco Firepower Management Center Command Injection VulnerabilityEPSS 3.5%