CVE-2021-34787

CWE-183CWE-755 — Improper Exception Handling4 documents4 sources
Severity
5.3MEDIUM
EPSS
1.2%
top 21.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
12
Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco Firepower Threat Defense+9 more
Timeline
PublishedOct 27
Latest updateMay 24

Description

A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass security protections. This vulnerability is due to improper handling of network requests by affected devices configured to use object group search. An attacker could exploit this vulnerability by sending a specially crafted network request to an affected device.…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages12 packages

▶NVDcisco/firepower_threat_defense6.5.0 — 6.6.5+3
▶NVDcisco/asa_5505_firmware009.009, 009.012+1

🔴Vulnerability Details

2
GHSA
GHSA-9jgg-4q8x-859v: A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower↗2022-05-24
▶
CVEList
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass Vulnerability↗2021-10-27
▶

📋Vendor Advisories

1
Cisco
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass Vulnerability↗2021-10-27
▶
CVE-2021-34787 (MEDIUM CVSS 5.3) | A vulnerability in the identity-bas | cvebase.io