VYPR
← All advisories
Medium severity4.4NVD Advisory· Published Oct 27, 2021· Updated Aug 11, 2026

CVE-2021-34761

CVE-2021-34761

Description

A vulnerability in Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite or append arbitrary data to system files using root-level privileges. The attacker must have administrative credentials on the device. This vulnerability is due to incomplete validation of user input for a specific CLI command. An attacker could exploit this vulnerability by authenticating to the device with administrative privileges and issuing a CLI command with crafted user parameters. A successful exploit could allow the attacker to overwrite or append arbitrary data to system files using root-level privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • Cisco Systems, Inc./Firepower Management Center Virtual Appliance6 versions
    cpe:2.3:a:cisco:firepower_management_center_virtual_appliance:6.2.3:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:cisco:firepower_management_center_virtual_appliance:6.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:firepower_management_center_virtual_appliance:6.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:firepower_management_center_virtual_appliance:6.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:firepower_management_center_virtual_appliance:6.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:firepower_management_center_virtual_appliance:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:firepower_management_center_virtual_appliance:7.1.0:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Secure Firewall Threat Defense
    cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*
    Range: >=6.4.0,<6.4.0.13
  • Cisco Systems, Inc./Sourcefire Defense Center6 versions
    cpe:2.3:a:cisco:sourcefire_defense_center:6.2.3:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:cisco:sourcefire_defense_center:6.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:sourcefire_defense_center:6.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:sourcefire_defense_center:6.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:sourcefire_defense_center:6.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:sourcefire_defense_center:7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:sourcefire_defense_center:7.1.0:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Firepower Threat Defense Softwarecpe-rescue2 versions
    n/a+ 1 more
    • (no CPE)range: n/a
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.