cbcvebase.
CVE-2021-40118
published 2021-10-27

CVE-2021-40118: A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow…

high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS requests. An attacker could exploit this vulnerability by sending a malicious HTTPS request to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Affected

51 ranges· showing 25
VendorProductVersion rangeFixed in
ciscoadaptive_security_appliance< 9.8.4.409.8.4.40
ciscoadaptive_security_appliance
ciscoadaptive_security_appliance_software>= 9.13.0 < 9.14.3.99.14.3.9
ciscoadaptive_security_appliance_software>= 9.15.0 < 9.15.1.179.15.1.17
ciscoadaptive_security_appliance_software>= 9.16.0 < 9.16.2.39.16.2.3
ciscoadaptive_security_appliance_software>= 9.9.0 < 9.12.4.299.12.4.29
ciscoasa_5505_firmware
ciscoasa_5505_firmware
ciscoasa_5505_firmware
ciscoasa_5505_firmware
ciscoasa_5505_firmware
ciscoasa_5512-x_firmware
ciscoasa_5512-x_firmware
ciscoasa_5512-x_firmware
ciscoasa_5512-x_firmware
ciscoasa_5512-x_firmware
ciscoasa_5515-x_firmware
ciscoasa_5515-x_firmware
ciscoasa_5515-x_firmware
ciscoasa_5515-x_firmware
ciscoasa_5515-x_firmware
ciscoasa_5525-x_firmware
ciscoasa_5525-x_firmware
ciscoasa_5525-x_firmware
ciscoasa_5525-x_firmware