CVE-2021-1489
A vulnerability in filesystem usage management for Cisco Firepower Device Manager (FDM) Software could allow an authenticated, remote attacker to exhaust filesystem resources, resulting in a denial of service (DoS) condition on an affected device. This vulnerability is due to the insufficient management of available filesystem resources. An attacker could exploit this vulnerability by uploading files to the device and exhausting available filesystem resources. A successful exploit could allow the attacker to cause database errors and cause the device to become unresponsive to web-based management. Manual intervention is required to free filesystem resources and return the device to an operational state.
Published:Apr 29, 2021
Last Modified:Nov 21, 2024
EPS:Apr 29, 2021
EPSS Score:0.00258
CVSS Score:6.5
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Firepower 1010
Cisco
Firepower 1010
Vendor
Cisco
Product
Firepower 1120
Cisco
Firepower 1120
Vendor
Cisco
Product
Firepower 1140
Cisco
Firepower 1140
Vendor
Cisco
Product
Firepower 1150
Cisco
Firepower 1150
Vendor
Cisco
Product
Firepower 2110
Cisco
Firepower 2110
Vendor
Cisco
Product
Firepower 2120
Cisco
Firepower 2120
Vendor
Cisco
Product
Firepower 2130
Cisco
Firepower 2130
Vendor
Cisco
Product
Firepower 2140
Cisco
Firepower 2140
Vendor
Cisco
Product
Firepower 4110
Cisco
Firepower 4110
Vendor
Cisco
Product
Firepower 4112
Cisco
Firepower 4112
Vendor
Cisco
Product
Firepower 4115
Cisco
Firepower 4115
Vendor
Cisco
Product
Firepower 4120
Cisco
Firepower 4120
Vendor
Cisco
Product
Firepower 4125
Cisco
Firepower 4125
Vendor
Cisco
Product
Firepower 4140
Cisco
Firepower 4140
Vendor
Cisco
Product
Firepower 4145
Cisco
Firepower 4145
Vendor
Cisco
Product
Firepower 4150
Cisco
Firepower 4150
Vendor
Cisco
Product
Firepower 9300
Cisco
Firepower 9300
Vendor
Cisco
Product
Firepower Device Manager
Cisco
Firepower Device Manager
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
