CVE-2021-1267 Cisco Firepower Management Center XML Entity Expansion Vulnerability
An authenticated attacker can cause a denial of service on Cisco Firepower Management Center by exploiting an XML entity expansion vulnerability in dashboard widgets.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-1267?
CVE-2021-1267 is a medium-severity vulnerability in Cisco Secure Firewall Management Center, published on 13 Jan 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability in the dashboard widget of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit this vulnerability by crafting an XML-based widget on an affected server. A successful exploit could cause increased memory and CPU utilization, which could result in a DoS condition.
Weakness: CWE-776
Which versions are affected by CVE-2021-1267?
It affects 1 product.
Products include Cisco Secure Firewall Management Center.
How do I fix CVE-2021-1267?
No fix has been published for CVE-2021-1267 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-1267 being exploited?
There is no known exploitation of CVE-2021-1267 in the wild and no public exploit code.
Other vulnerabilities in Cisco Secure Firewall Management Center
- CVE-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel
- CVE-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data
- CVE-2026-20316 Cisco Secure Firewall Management Center Use of Hard-coded Password
- CVE-2025-20265 Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability
- CVE-2024-20424 Command injection in Cisco Firepower Management Center
Sources
Also known as GHSA-5j3f-6x5j-rrv5.