CVE-2021-1236

🗓️ 13 Jan 2021 21:17:03Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 87 Views

Cisco Snort vulnerability allows unauthenticated attacker to bypass policies and deliver malicious payloa

Reporter	Title	Published	Views	Family All 36
Circl	CVE-2021-1236	14 Jan 202100:48	–	circl
Cisco	Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability	13 Jan 202116:00	–	cisco
Tenable Nessus	Cisco IOS XE Products Snort Application Detection Engine Policy Bypass (cisco-sa-snort-app-bypass-cSBYCATq)	5 Feb 202100:00	–	nessus
Tenable Nessus	Cisco Firepower Threat Defense Snort Application Detection Engine Policy Bypass (cisco-sa-snort-app-bypass-cSBYCATq)	5 Feb 202100:00	–	nessus
Tenable Nessus	Debian dla-3317 : snort - security update	11 Feb 202300:00	–	nessus
Tenable Nessus	Debian DSA-5354-1 : snort - security update	18 Feb 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-1236	10 Sep 202500:00	–	nessus
CNNVD	Multiple Cisco Products Security Vulnerabilities	13 Jan 202100:00	–	cnnvd
Cvelist	CVE-2021-1236 Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability	13 Jan 202121:17	–	cvelist
Debian	[SECURITY] [DLA 3317-1] snort security update	10 Feb 202323:23	–	debian

NVD

Node

cisco ios_xeRange<17.4.1

AND

cisco 1100-4p_integrated_services_routerMatch-

cisco 1100-8p_integrated_services_routerMatch-

cisco 1101-4p_integrated_services_routerMatch-

cisco 1109-2p_integrated_services_routerMatch-

cisco 1109-4p_integrated_services_routerMatch-

cisco 1111x-8p_integrated_services_routerMatch-

cisco 4221_integrated_services_routerMatch-

cisco 4321_integrated_services_routerMatch-

cisco 4331_integrated_services_routerMatch-

cisco 4351_integrated_services_routerMatch-

cisco 4431_integrated_services_routerMatch-

cisco 4451-x_integrated_services_routerMatch-

cisco 4461_integrated_services_routerMatch-

cisco csr_1000vMatch-

cisco isa_3000Match-

Node

cisco firepower_threat_defenseRange<6.5.0.5

cisco secure_firewall_management_centerMatch2.9.14.0

cisco secure_firewall_management_centerMatch2.9.14.14

cisco secure_firewall_management_centerMatch2.9.15

cisco secure_firewall_management_centerMatch2.9.16

cisco secure_firewall_management_centerMatch2.9.17

Node

snort snortRange<2.9.14

[
  {
    "vendor": "Cisco",
    "product": "Cisco Firepower Threat Defense Software",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-app-bypass-cSBYCATq
lists	www.lists.debian.org/debian-lts-announce/2023/02/msg00011.html
debian	www.debian.org/security/2023/dsa-5354

26 Nov 2024 16:09Current

5Medium risk

Vulners AI Score5

CVSS 25

CVSS 3.15.3

CVSS 34

EPSS0.00272

SSVC

CWE-670