CVE-2021-1477— Cisco Firepower Management Center Software Policy Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-1477
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Firepower Management Center Software Policy Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in an access control mechanism of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access services beyond the scope of their authorization. This vulnerability is due to insufficient enforcement of access control in the affected software. An attacker could exploit this vulnerability by directly accessing the internal services of an affected device. A successful exploit could allow the attacker to overwrite policies and impact the configuration and operation of the affected device.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
访问控制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Firepower Management Center 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Firepower Management Center（FMC）是美国思科（Cisco）公司的新一代防火墙管理中心软件。 Cisco Firepower Management Center 存在安全漏洞，该漏洞源于在受影响的软件中没有充分执行访问控制。攻击者可利用该漏洞可以通过直接访问受影响设备的内部服务来利用这个漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Firepower Management Center | n/a | - |
II. Public POCs for CVE-2021-1477
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-1477
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-iac-pZDMQ4wCvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2021-1477
Same Patch Batch · Cisco · 2021-04-29 · 17 CVEs total
| CVE-2021-1445 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2021-1501 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software SIP |
| CVE-2021-1504 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2021-1493 | 8.5 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2021-1476 | 6.7 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Command I |
| CVE-2021-1488 | 6.7 MEDIUM | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firep |
| CVE-2021-1256 | 6.0 MEDIUM | Cisco Firepower Threat Defense Software Command File Overwrite Vulnerability |
| CVE-2021-1495 | 5.8 MEDIUM | Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability |
| CVE-2021-1369 | 5.4 MEDIUM | Cisco Firepower Device Manager On-Box Software XML External Entity Vulnerability |
| CVE-2021-1456 | 4.8 MEDIUM | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities |
| CVE-2021-1457 | 4.8 MEDIUM | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities |
| CVE-2021-1458 | 4.8 MEDIUM | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities |
| CVE-2021-1402 | Cisco Firepower Threat Defense Software SSL Decryption Policy Denial of Service Vulnerabil | |
| CVE-2021-1448 | Cisco Firepower Threat Defense Software Command Injection Vulnerability | |
| CVE-2021-1455 | Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities | |
| CVE-2021-1489 | Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vuln |
IV. Related Vulnerabilities
Same product: Cisco Firepower Management Center
- CVE-2025-20220
Cisco Secure Firewall Management Center和Cisco Secure Firewal - CVE-2025-20306
Cisco Secure Firewall Management Center Software Command Inj - CVE-2025-20302
Cisco Secure Firewall Management Center Software Authorizati - CVE-2025-20301
Cisco Secure Firewall Management Center Software Authorizati - CVE-2025-20265
Cisco Secure Firewall Management Center Software Radius Remo
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-284
- CVE-2026-8233
Dotouch XproUPF access control - CVE-2026-42569
phpvms: /importer authorization bypass causing full database - CVE-2026-42205
Avo: Broken Access Control: Unauthorized Execution of Arbitr - CVE-2026-41487
Langfuse: Improper role-based-access control in Langfuse LLM - CVE-2026-42278
UltraDAG: Smart Account Spending Policy Bypass via Pockets
V. Comments for CVE-2021-1477
No comments yet