PT-2021-3651

Name of the Vulnerable Software and Affected Versions Cisco Firepower Device Manager On-Box Software affected versions not specified Description The issue is related to the REST API of Cisco Firepower Device Manager On-Box Software, where insufficient sanitization of user input on specific REST A...

Cisco Firepower Device Manager On-Box File Write

The software vulnerability of Cisco Firepower Device Manager On-Box exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to rewrite any files in the basic operating system of the vulnerable device by loading a malicious file...

XML Analyzer Maintenance Failure

The vulnerability of the XML analyzer for software that manages Cisco Firepower Device Manager On-Box devices is related to an operation where data escapes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

CVE-2020-3310: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the XML parser code of Cisco Firepower Device Manager On-Box software could allow an authenticated, remote attacker to cause an affected system to become unstable or reload. The vulnerability is due to insufficient hardening of the XML parser configuration. An attacker could...

PT-2020-2232

Name of the Vulnerable Software and Affected Versions Cisco Firepower Device Manager On-Box software affected versions not specified Description The issue is related to insufficient hardening of the XML parser configuration, which could allow an authenticated, remote attacker to cause the system ...