CVE-2021-1369: Cisco Firepower Device Manager On-Box Software XML External Entity Vulnerability
First published: Thu Apr 29 2021(Updated: )
A vulnerability in the REST API of Cisco Firepower Device Manager (FDM) On-Box Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected device. This vulnerability is due to the improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by sending malicious requests that contain references in XML entities to an affected system. A successful exploit could allow the attacker to retrieve files from the local system, resulting in the disclosure of sensitive information or causing a partial denial of service (DoS) condition on the affected device.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower Device Manager | <6.5.0.5 | |
| Cisco Firepower Device Manager | >=6.6.0<6.6.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco Firepower Device Manager (FDM) On-Box Software vulnerability?
The vulnerability ID for this Cisco Firepower Device Manager (FDM) On-Box Software vulnerability is CVE-2021-1369.
What is the severity of CVE-2021-1369?
The severity of CVE-2021-1369 is medium with a severity value of 5.4.
How does CVE-2021-1369 affect Cisco Firepower Device Manager (FDM) On-Box Software?
CVE-2021-1369 allows an authenticated, remote attacker to gain read and write access to information stored on an affected device due to the improper handling of XML External Entity (XXE) entities.
Which versions of Cisco Firepower Device Manager (FDM) On-Box Software are affected by CVE-2021-1369?
Versions up to and excluding 6.5.0.5, as well as versions between 6.6.0 and 6.6.3 of Cisco Firepower Device Manager (FDM) On-Box Software are affected by CVE-2021-1369.
How can I fix the CVE-2021-1369 vulnerability?
To fix the CVE-2021-1369 vulnerability, it is recommended to upgrade Cisco Firepower Device Manager (FDM) On-Box Software to a version that is not affected by the vulnerability. Refer to the Cisco Security Advisory linked in the references for more information.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/last-modified-date
- agent/title
- agent/weakness
- agent/severity
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco firepower device manager
- version/cisco firepower device manager/6.6.0