cisco-sa-fmc-iac-pZDMQ4wC: Cisco Firepower Management Center Software Policy Vulnerability
First published: Wed Apr 28 2021(Updated: )
A vulnerability in an access control mechanism of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access services beyond the scope of their authorization. This vulnerability is due to insufficient enforcement of access control in the affected software. An attacker could exploit this vulnerability by directly accessing the internal services of an affected device. A successful exploit could allow the attacker to overwrite policies and impact the configuration and operation of the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-iac-pZDMQ4wC Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower Management Center |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-fmc-iac-pZDMQ4wC?
The severity of cisco-sa-fmc-iac-pZDMQ4wC is classified as critical due to potential unauthorized access to sensitive services.
How do I fix cisco-sa-fmc-iac-pZDMQ4wC?
To fix cisco-sa-fmc-iac-pZDMQ4wC, apply the latest patches provided by Cisco for the Firepower Management Center Software.
Who is affected by cisco-sa-fmc-iac-pZDMQ4wC?
Cisco Firepower Management Center Software installations are affected by cisco-sa-fmc-iac-pZDMQ4wC.
What causes cisco-sa-fmc-iac-pZDMQ4wC?
cisco-sa-fmc-iac-pZDMQ4wC is caused by insufficient enforcement of access control mechanisms within the Cisco Firepower Management Center Software.
Can an attacker exploit cisco-sa-fmc-iac-pZDMQ4wC remotely?
Yes, an authenticated, remote attacker can exploit cisco-sa-fmc-iac-pZDMQ4wC to access unauthorized services.
- agent/event
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/title
- agent/severity
- agent/references
- agent/weakness
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco firepower management center