Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Firepower Device Manager On-Box Software XML External Entity Vulnerability
Vulnerability Description
A vulnerability in the REST API of Cisco Firepower Device Manager (FDM) On-Box Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected device. This vulnerability is due to the improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by sending malicious requests that contain references in XML entities to an affected system. A successful exploit could allow the attacker to retrieve files from the local system, resulting in the disclosure of sensitive information or causing a partial denial of service (DoS) condition on the affected device.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Vulnerability Title
Cisco Firepower Device Manager 代码问题漏洞
Vulnerability Description
Cisco Firepower Device Manager（FDM）是美国思科（Cisco）公司的一款防火墙设备管理器。该产品支持访问规则配置、系统监控等功能。 Cisco Firepower Device Manager 存在代码问题漏洞，该漏洞源于经过身份验证的远程攻击者获得此漏洞是由于在解析某些XML文件时不正确处理XML外部实体(XXE)条目。
CVSS Information
N/A
Vulnerability Type
N/A