← Back

CVE-2021-1489

nvd nist
Published: Apr 29, 2021Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

A vulnerability in filesystem usage management for Cisco Firepower Device Manager (FDM) Software could allow an authenticated, remote attacker to exhaust filesystem resources, resulting in a denial of service (DoS) condition on an affected device. This vulnerability is due to the insufficient management of available filesystem resources. An attacker could exploit this vulnerability by uploading files to the device and exhausting available filesystem resources. A successful exploit could allow the attacker to cause database errors and cause the device to become unresponsive to web-based management. Manual intervention is required to free filesystem resources and return the device to an operational state.

Affected (3)

1 product
Firepower Device Manager
Configuration A
3 vulnerable · 17 platform
Vulnerable SoftwareAffected Versions
Cisco
From 6.4.0 to 6.4.0.12
From 6.5.0 to 6.6.4
From 6.7.0 to 6.7.0.2
Running on/withPlatform Versions
Cisco
Firepower 1010
All versions
Cisco
Firepower 1120
All versions
Cisco
Firepower 1140
All versions
Cisco
Firepower 1150
All versions
Cisco
Firepower 2110
All versions
Cisco
Firepower 2120
All versions
Cisco
Firepower 2130
All versions
Cisco
Firepower 2140
All versions
Cisco
Firepower 4110
All versions
Cisco
Firepower 4112
All versions
Cisco
Firepower 4115
All versions
Cisco
Firepower 4120
All versions
Cisco
Firepower 4125
All versions
Cisco
Firepower 4140
All versions
Cisco
Firepower 4145
All versions
Cisco
Firepower 4150
All versions
Cisco
Firepower 9300
All versions

Timeline

No history available yet.