CVE-2021-1477
Medium
Description
A vulnerability in an access control mechanism of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access services beyond the scope of their authorization. This vulnerability is due to insufficient enforcement of access control in the affected software. An attacker could exploit this vulnerability by directly accessing the internal services of an affected device. A successful exploit could allow the attacker to overwrite policies and impact the configuration and operation of the affected device.
SeverityMedium
CVSS4.3
Exploit probability—
Product
Cisco Secure Firewall Management Center
PublishedApr 29, 2021
First seenApr 29, 2021
Weakness typeCWE-284Improper access control
How to fix
Update
- cisco secure_firewall_management_center6.4.0.12, 6.6.3, 6.7.0.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure_firewall_management_center | v < 6.4.0.12, 6.5.0 ≤ v < 6.6.3, 6.7.0 ≤ v < 6.7.0.2 | 6.4.0.12, 6.6.3, 6.7.0.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.