Vulnerability · Published Apr 29, 2021 · Assigned by cisco
CVE-2021-1489Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vulnerability
Medium 4.9
In plain English
A medium-severity uncontrolled resource consumption in Cisco Firepower Threat Defense Software from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities).
Official description
A vulnerability in filesystem usage management for Cisco Firepower Device Manager (FDM) Software could allow an authenticated, remote attacker to exhaust filesystem resources, resulting in a denial of service (DoS) condition on an affected device. This vulnerability is due to the insufficient management of available filesystem resources. An attacker could exploit this vulnerability by uploading files to the device and exhausting available filesystem resources. A successful exploit could allow the attacker to cause database errors and cause the device to become unresponsive to web-based management. Manual intervention is required to free filesystem resources and return the device to an operational state.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Firepower Threat Defense Software | n/a |
Weakness: CWE-400 · Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
References
- 20210428 Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vulnerability vendor-advisory, x_refsource_CISCO