CVE-2021-1477 — Improper Access Control in Cisco Secure Firewall Management Center

CWE-284 — Improper Access ControlCWE-269 — Improper Privilege Management4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.1%
top 64.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Secure Firewall Management CenterCisco Firepower Management Center
Timeline
PublishedApr 29
Latest updateMay 24

Description

A vulnerability in an access control mechanism of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access services beyond the scope of their authorization. This vulnerability is due to insufficient enforcement of access control in the affected software. An attacker could exploit this vulnerability by directly accessing the internal services of an affected device. A successful exploit could allow the attacker to overwrite policies and impact the co…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-3fhj-6hmf-3c6x: A vulnerability in an access control mechanism of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to ac↗2022-05-24
▶
CVEList
Cisco Firepower Management Center Software Policy Vulnerability↗2021-04-29
▶

📋Vendor Advisories

1
Cisco
Cisco Firepower Management Center Software Policy Vulnerability↗2021-04-28
▶
CVE-2021-1477 — Improper Access Control in Cisco | cvebase