Security Vulnerabilities in Multiple Cisco Products

🗓️ 13 Jan 2021 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 16 Views

Cisco product vulnerability lets unauthenticated attackers bypass HTTP file policies and deliver malware.

Reporter	Title	Published	Views	Family All 38
BDU FSTEC	The vulnerability of the Snort intrusion detection system, related to errors in processing HTTP headers, allows a perpetrator to bypass the configured file policy for HTTP.	2 Feb 202100:00	–	bdu_fstec
Tenable Nessus	Cisco Firepower Threat Defense HTTP Detection Engine File Policy Bypass (cisco-sa-snort-filepolbypass-67DEwMe2)	4 Feb 202100:00	–	nessus
Tenable Nessus	Cisco Integrated Services Routers 1000/4000 Series HTTP Detection Engine File Policy Bypass (cisco-sa-snort-filepolbypass-67DEwMe2)	4 Feb 202100:00	–	nessus
Tenable Nessus	Debian dla-3317 : snort - security update	11 Feb 202300:00	–	nessus
Tenable Nessus	Debian DSA-5354-1 : snort - security update	18 Feb 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-1223	10 Sep 202500:00	–	nessus
Cisco	Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability	13 Jan 202116:00	–	cisco
CVE	CVE-2021-1223	13 Jan 202121:16	–	cve
Cvelist	CVE-2021-1223 Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability	13 Jan 202121:16	–	cvelist
Debian	[SECURITY] [DLA 3317-1] snort security update	10 Feb 202323:23	–	debian

Source	Link
debian	www.debian.org/security/2023/dsa-5354
lists	www.lists.debian.org/debian-lts-announce/2023/02/msg00011.html
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-filepolbypass-67DEwMe2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-1223
auscert	www.auscert.org.au/bulletins/ESB-2023.0833
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-filepolbypass-67DEwMe2
auscert	www.auscert.org.au/bulletins/ESB-2023.1047
auscert	www.auscert.org.au/bulletins/ESB-2021.0139/

26 May 2026 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 3.17.5

CVSS 35.8

EPSS0.01985

SSVC

Cisco products unauthenticated attackers http file policies malware