Known vulnerabilities in Cisco Firepower Device Manager On-Box
Vendor:
Cisco Systems, Inc
Software:
Cisco Firepower Device Manager On-Box
Software CPE:
cpe:2.3:a:cisco_systems:cisco_fdm_on-box:*:*:*:*:*:*:*:*
Website:
https://www.cisco.com
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU55236 - Improper Control of Generation of Code ('Code Injection') CVE-2021-1518 |
CWE-94 | Medium | 6.4.0.12, 6.4.4, 6.7.0.2 | 22.07.2021 |
SB2021072232 |
||
| #VU52735 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-1369 |
CWE-611 | Medium | 6.5.0.5, 6.6.3, 6.7.0 | 29.04.2021 |
SB2021042906 |
||
| #VU27580 - Improper input validation CVE-2020-3309 |
CWE-20 | Low | 6.2.3 | 07.05.2020 |
SB2020050702 |
||
| #VU27579 - Memory corruption CVE-2020-3310 |
CWE-119 | Low | 6.2.3 | 07.05.2020 |
SB2020050702 |