The vulnerability of Microprogramming-based Network Interface Software of Cisco Adaptive Security Appliance Software (ASA) and Cisco Firepower Threat Defense (FTD) lies in the copying of buffers without checking the size of the input data. This allows attackers to compromise the confidentiality and accessibility of the protected information.

🗓️ 05 May 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Buffer copy without input size check in Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense microprogramming interface risks data confidentiality and accessibility.

Reporter	Title	Published	Views	Family All 13
Cisco	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial of Service Vulnerability	28 Apr 202116:00	–	cisco
Tenable Nessus	Cisco Adaptive Security Appliance Software Web Services Buffer Overflow DoS (cisco-sa-memc-dos-fncTyYKG)	6 May 202100:00	–	nessus
Tenable Nessus	Cisco Firepower Threat Defense Software Web Services Buffer Overflow DoS (cisco-sa-memc-dos-fncTyYKG)	6 May 202100:00	–	nessus
CNNVD	Cisco Adaptive Security Appliances Software 安全漏洞	28 Apr 202100:00	–	cnnvd
CVE	CVE-2021-1493	29 Apr 202117:31	–	cve
Cvelist	CVE-2021-1493 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial of Service Vulnerability	29 Apr 202117:31	–	cvelist
EUVD	EUVD-2021-6960	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco ASA and FTD	29 Apr 202100:00	–	ncsc
NVD	CVE-2021-1493	29 Apr 202118:15	–	nvd
OSV	CVE-2021-1493	29 Apr 202118:15	–	osv