Medium severity4.3NVD Advisory· Published Jan 13, 2021· Updated Jun 17, 2026

CVE-2021-1267

Description

A vulnerability in the dashboard widget of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit this vulnerability by crafting an XML-based widget on an affected server. A successful exploit could cause increased memory and CPU utilization, which could result in a DoS condition.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Secure Firewall Management Center
cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*
Range: <6.6.1
Cisco Systems, Inc./Firepower Management Centerllm-fuzzy
Cisco Systems, Inc./Firepower Management Center (FMC) Softwarecpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xee-DFzARDcsnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000