CVE Feed

    Dashboard / CVE / CVE-2021-1126

    CVE-2021-1126

    A vulnerability in the storage of proxy server credentials of Cisco Firepower Management Center (FMC) could allow an authenticated, local attacker to view credentials for a configured proxy server. The vulnerability is due to clear-text storage and weak permissions of related configuration files. An attacker could exploit this vulnerability by accessing the CLI of the affected software and viewing the contents of the affected files. A successful exploit could allow the attacker to view the credentials that are used to access the proxy server.

    Published:Jan 13, 2021
    Last Modified:Nov 26, 2024
    EPS:Jan 13, 2021
    EPSS Score:0.00039
    CVSS Score:5.5

    Affected Products

    Vendor
    Cisco
    Product
    Secure Firewall Management Center

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs
    CAPEC-102 Session Sidejacking
    CAPEC-122 Privilege Abuse
    CAPEC-127 Directory Indexing
    CAPEC-17 Using Malicious Files
    CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels
    CAPEC-206 Signing Malicious Code
    CAPEC-234 Hijacking a privileged process
    CAPEC-474 Signature Spoofing by Key Theft
    CAPEC-50 Password Recovery Exploitation
    CAPEC-509 Kerberoasting
    CAPEC-551 Modify Existing Service
    CAPEC-555 Remote Services with Stolen Credentials
    CAPEC-560 Use of Known Domain Credentials
    CAPEC-561 Windows Admin Shares with Stolen Credentials
    CAPEC-60 Reusing Session IDs (aka Session Replay)
    CAPEC-600 Credential Stuffing
    CAPEC-61 Session Fixation
    CAPEC-62 Cross Site Request Forgery
    CAPEC-642 Replace Binaries
    CAPEC-644 Use of Captured Hashes (Pass The Hash)
    CAPEC-645 Use of Captured Tickets (Pass The Ticket)
    CAPEC-652 Use of Known Kerberos Credentials
    CAPEC-653 Use of Known Operating System Credentials

    Related CVEs

    CVE-2026-20316 (CVSS 5.3) — A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an …
    CVE-2026-20018 (CVSS 5.9) — A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) Software and Ci…
    CVE-2026-20003 (CVSS 4.9) — A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to …
    CVE-2026-20002 (CVSS 8.1) — A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticate…
    CVE-2026-20131 (CVSS 10) — A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Softwar…
    CVE-2026-20044 (CVSS 6) — A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software could allo…
    CVE-2026-20079 (CVSS 10) — A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an …
    CVE-2026-20001 (CVSS 6.5) — A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to …
    CVE-2025-20306 (CVSS 4.9) — A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Softwar…
    CVE-2025-20302 (CVSS 4.3) — A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticate…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High