CVE-2021-34762 Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability
Authenticated attackers can read or write arbitrary files on Cisco Firepower Management Center devices via crafted HTTPS requests.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-34762?
CVE-2021-34762 is a high-severity path traversal vulnerability in Cisco Secure Firewall Threat Defense, published on 27 Oct 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The attacker would require valid device credentials. The vulnerability is due to insufficient input validation of the HTTPS URL by the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTPS request that contains directory traversal character sequences to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on the device.
Which versions are affected by CVE-2021-34762?
It affects 3 products.
Products include Cisco Firepower Management Center Virtual Appliance, Cisco Secure Firewall Threat Defense, Cisco Sourcefire Defense Center.
How do I fix CVE-2021-34762?
No fix has been published for CVE-2021-34762 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2021-34762 being exploited?
There is no known exploitation of CVE-2021-34762 in the wild and no public exploit code.
Other vulnerabilities in Cisco Secure Firewall Threat Defense
- CVE-2021-34781 Cisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability
- CVE-2021-34755 Cisco Firepower Threat Defense Software Command Injection Vulnerabilities
- CVE-2021-34756 Cisco Firepower Threat Defense Software Command Injection Vulnerabilities
- CVE-2021-34763 Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities
- CVE-2021-34764 Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities
Sources
Also known as GHSA-8m4x-wmgm-h3w9.