The vulnerability of Cisco AMP, a security tool against malicious software, for end-user devices running Cisco AsyncOS in Cisco Email Security Appliance and Cisco Web Security Appliance systems is related to the lack of trust-chain tracking during certificate verification. This allows attackers to intercept traffic between affected devices.

Cisco AMP on Cisco AsyncOS devices has a certificate verification flaw enabling traffic interception.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2021-1566	16 Jun 202116:00	–	attackerkb
Cisco	Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation Vulnerability	16 Jun 202116:00	–	cisco
CNNVD	Cisco Advanced Malware Protection 信任管理问题漏洞	16 Jun 202100:00	–	cnnvd
CVE	CVE-2021-1566	16 Jun 202117:45	–	cve
Cvelist	CVE-2021-1566 Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation Vulnerability	16 Jun 202117:45	–	cvelist
EUVD	EUVD-2021-7033	3 Oct 202520:07	–	euvd
NCSC	Vulnerability fixed in Cisco Email Security Appliance and Web Security Appliance	17 Jun 202100:00	–	ncsc
NVD	CVE-2021-1566	16 Jun 202118:15	–	nvd
Prion	Input validation	16 Jun 202118:15	–	prion
ThreatPost	Cisco Smart Switches Riddled with Security Holes	17 Jun 202119:30	–	threatpost

Vulners

Node

cisco_systems asyncosRange13.0–13.0.0-030

cisco_systems asyncosRange12.0.0–12.0.3-005

cisco_systems asyncosRange12.5.0–12.5.1-043

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-1566
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-cert-vali-n8L97RW
web	www.web.nvd.nist.gov/view/vuln/detail

25 Jan 2023 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 37.4

CVSS 28.8

EPSS0.0067