The vulnerability of the IDFW rule processing function in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) software allows attackers to circumvent security restrictions.

🗓️ 25 Nov 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Vulnerability in IDFW rule processing on Cisco ASA and FTD due to ACL deficiencies allows bypass with crafted requests.

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2021-34787	27 Oct 202116:00	–	attackerkb
Circl	CVE-2021-34787	27 Oct 202122:16	–	circl
Cisco	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass Vulnerability	27 Oct 202116:00	–	cisco
Tenable Nessus	Cisco Adaptive Security Appliance Software Identity-Based Rule Bypass (cisco-sa-asaftd-rule-bypass-ejjOgQEY)	2 Nov 202100:00	–	nessus
Tenable Nessus	Cisco Firepower Threat Defense Software Identity-Based Rule Bypass (cisco-sa-asaftd-rule-bypass-ejjOgQEY)	2 Nov 202100:00	–	nessus
CNNVD	Cisco Firepower Threat Defense（FTD）和Cisco Adaptive Security Appliances Software（ASA Software）安全漏洞	27 Oct 202100:00	–	cnnvd
CVE	CVE-2021-34787	27 Oct 202118:56	–	cve
Cvelist	CVE-2021-34787 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass Vulnerability	27 Oct 202118:56	–	cvelist
EUVD	EUVD-2021-21437	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Cisco Adaptive Security Appliance (ASA)	28 Oct 202100:00	–	ncsc

Vulners

Node

cisco_systems firepower_threat_defenseRange<6.4.0.13

OR

cisco_systems firepower_threat_defenseRange6.7.0–6.7.0.3

OR

cisco_systems firepower_threat_defenseRange7.0.0–7.0.1

OR

cisco_systems adaptive_security_applianceRange<9.8.4.40

OR

cisco_systems adaptive_security_applianceRange9.15–9.15.1.17

OR

cisco_systems firepower_threat_defenseRange6.5.0–6.6.5

OR

cisco_systems adaptive_security_applianceRange9.9–9.12.4.25

OR

cisco_systems adaptive_security_applianceRange9.13–9.14.3.1

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-rule-bypass-ejjOgQEY
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021102809
web	www.web.nvd.nist.gov/view/vuln/detail

25 Nov 2021 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

CVSS 35.3

EPSS0.01003

firewall rule processing access control lists Cisco ASA Firepower Threat Defense crafted requests security bypass