CVE-2021-1477CWE-284

Cisco Firepower Management Center Software Policy Vulnerability

Medium · published April 29, 2021

CVSS v3.1
4.3
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is

A vulnerability in an access control mechanism of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access services beyond the scope of their authorization. This vulnerability is due to insufficient enforcement of access control in the affected software. An attacker could exploit this vulnerability by directly accessing the internal services of an affected device. A successful exploit could allow the attacker to overwrite policies and impact the configuration and operation of the affected device.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00677 · 51.7th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-04-29T17:30Z
EPSS history
Timeline
  • 29 APR 17:30Z
    Cisco Firepower Management Center Software Policy Vulnerability
    cvelistv5