CVE-2021-1369— Cisco Firepower Device Manager On-Box Software XML External Entity Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-1369
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Firepower Device Manager On-Box Software XML External Entity Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the REST API of Cisco Firepower Device Manager (FDM) On-Box Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected device. This vulnerability is due to the improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by sending malicious requests that contain references in XML entities to an affected system. A successful exploit could allow the attacker to retrieve files from the local system, resulting in the disclosure of sensitive information or causing a partial denial of service (DoS) condition on the affected device.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Firepower Device Manager 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Firepower Device Manager（FDM）是美国思科（Cisco）公司的一款防火墙设备管理器。该产品支持访问规则配置、系统监控等功能。 Cisco Firepower Device Manager 存在代码问题漏洞，该漏洞源于经过身份验证的远程攻击者获得此漏洞是由于在解析某些XML文件时不正确处理XML外部实体(XXE)条目。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Firepower Threat Defense Software | n/a | - |
II. Public POCs for CVE-2021-1369
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-1369
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fdm-xxe-zR7sxPfsvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2021-1369
Same Patch Batch · Cisco · 2021-04-29 · 17 CVEs total
| CVE-2021-1445 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2021-1501 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software SIP |
| CVE-2021-1504 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2021-1493 | 8.5 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2021-1476 | 6.7 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Command I |
| CVE-2021-1488 | 6.7 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firep |
| CVE-2021-1256 | 6.0 MEDIUM | Cisco Firepower Threat Defense Software Command File Overwrite Vulnerability |
| CVE-2021-1495 | 5.8 MEDIUM | Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability |
| CVE-2021-1456 | 4.8 MEDIUM | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities |
| CVE-2021-1457 | 4.8 MEDIUM | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities |
| CVE-2021-1458 | 4.8 MEDIUM | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities |
| CVE-2021-1477 | 4.3 MEDIUM | Cisco Firepower Management Center Software Policy Vulnerability |
| CVE-2021-1402 | Cisco Firepower Threat Defense Software SSL Decryption Policy Denial of Service Vulnerabil | |
| CVE-2021-1448 | Cisco Firepower Threat Defense Software Command Injection Vulnerability | |
| CVE-2021-1455 | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities | |
| CVE-2021-1489 | Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vuln |
IV. Related Vulnerabilities
Same product: Cisco Firepower Threat Defense Software
- CVE-2025-20268
Cisco Secure Firewall Threat Defense Software Geolocation Re - CVE-2025-20222
Cisco Adaptive Security Appliance Software and Firepower Thr - CVE-2025-20217
Cisco Firepower Threat Defense Intrusion Detection Denial of - CVE-2021-1494
Snort 安全漏洞 - CVE-2021-34753
Cisco Firepower Threat Defense Ethernet Industrial Protocol
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-611
- CVE-2026-41936
Vvveb < 1.0.8.2 XML External Entity Injection via Import - CVE-2026-40682
Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntr - CVE-2026-6501
ILM Informatique jOpenDocument 代码问题漏洞 - CVE-2025-14543
Improper Restriction of XML External Entity Reference vulner - CVE-2024-13971
Arbitrary File Read and Server Side Request Forgery via XML
V. Comments for CVE-2021-1369
No comments yet