The vulnerability in the implementation of the Unified Threat Defense function for Cisco IOS XE operating systems, the Snort intrusion detection system, the microprogramming-based network interface device Cisco Firepower Threat Defense, and the Cisco IOS XE SD-WAN software allows a threat actor to trigger a service failure.

🗓️ 01 Dec 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

Cisco IOS XE Unified Threat Defense flaw enables service interruption via unlimited memory use in ICMP processing.

Reporter	Title	Published	Views	Family All 39
ATTACKERKB	CVE-2021-40114	27 Oct 202116:00	–	attackerkb
AlpineLinux	CVE-2021-40114	27 Oct 202118:56	–	alpinelinux
Circl	CVE-2021-40114	27 Oct 202122:16	–	circl
Cisco	Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability	27 Oct 202116:00	–	cisco
Tenable Nessus	Cisco Firepower Threat Defense Snort Memory Leak DoS (cisco-sa-snort-dos-s2R7W9UU)	6 Jun 202200:00	–	nessus
Tenable Nessus	Cisco IOS XE Software Unified Threat Defense DoS (cisco-sa-snort-dos-s2R7W9UU)	6 Jun 202200:00	–	nessus
Tenable Nessus	Debian dla-3317 : snort - security update	11 Feb 202300:00	–	nessus
Tenable Nessus	Debian DSA-5354-1 : snort - security update	18 Feb 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-40114	10 Sep 202500:00	–	nessus
CNNVD	Cisco Products Snort 安全漏洞	27 Oct 202100:00	–	cnnvd

Vulners

Node

cisco_systems firepower_threat_defenseRange<6.4.0.12

OR

cisco_systems firepower_threat_defenseRange6.5.0–6.6.3

OR

cisco_systems firepower_threat_defenseRange6.7.0.0–6.7.0.2

OR

cisco_systems cisco_ios_xe_sd-wanRange17.4–17.4.2

OR

cisco_systems cisco_ios_xe_sd-wanRange16.12–16.12.6

OR

cisco_systems cisco_ios_xe_sd-wanRange17.3–17.3.4a

OR

cisco_systems snortRange2.0–2.9.18

OR

cisco_systems cisco_ios_xeRange16.12–16.12.6

OR

cisco_systems cisco_ios_xeRange17.3–17.3.4a

OR

cisco_systems cisco_ios_xeRange17.4–17.4.2

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-40114
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-dos-s2R7W9UU
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021102917
securitylab	www.securitylab.ru/vulnerability/526099.php
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8/
web	www.web.nvd.nist.gov/view/vuln/detail

13 Sep 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 36.8

CVSS 27.8

EPSS0.02367

Cisco IOS XE Unified Threat Defense Snort intrusion detection Firepower Threat Defense SD WAN software ICMP processing Memory exhaustion