cisco firepower-device-manager CVE-2021-1369 vulnerability in Cisco Products
Published on April 29, 2021

Cisco Firepower Device Manager On-Box Software XML External Entity Vulnerability
A vulnerability in the REST API of Cisco Firepower Device Manager (FDM) On-Box Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected device. This vulnerability is due to the improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by sending malicious requests that contain references in XML entities to an affected system. A successful exploit could allow the attacker to retrieve files from the local system, resulting in the disclosure of sensitive information or causing a partial denial of service (DoS) condition on the affected device.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2021-1369 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity, and a small impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
NONE
Availability Impact:
LOW

Weakness Type

What is a XXE Vulnerability?

The software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

CVE-2021-1369 has been classified to as a XXE vulnerability or weakness.


Products Associated with CVE-2021-1369

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-1369 are published in these products:

Cisco Firepower Device Manager
 
Cisco Firepower Threat Defense Software
 

Affected Versions

Cisco Firepower Threat Defense Software Version n/a is affected by CVE-2021-1369

Exploit Probability

EPSS
0.53%
Percentile
66.61%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.