CVE-2021-1504

🗓️ 29 Apr 2021 17:31:29Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 83 Views

Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to lack of proper input validation of the HTTPS request

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2021-1504	29 Apr 202114:20	–	circl
Cisco	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services VPN Denial of Service Vulnerabilities	28 Apr 202116:00	–	cisco
Tenable Nessus	Cisco Adaptive Security Appliance Software Multiple DoS (cisco-sa-asa-ftd-vpn-dos-fpBcpEcD)	6 May 202100:00	–	nessus
Tenable Nessus	Cisco Firepower Threat Defense Software Multiple DoS (cisco-sa-asa-ftd-vpn-dos-fpBcpEcD)	6 May 202100:00	–	nessus
CNNVD	Cisco Adaptive Security Appliances Software 缓冲区错误漏洞	28 Apr 202100:00	–	cnnvd
CNVD	Cisco Adaptive Security Appliance and Firepower Threat Defense Denial of Service Vulnerability (CNVD-2021-50580)	29 Apr 202100:00	–	cnvd
Cvelist	CVE-2021-1504 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services VPN Denial of Service Vulnerabilities	29 Apr 202117:31	–	cvelist
EUVD	EUVD-2021-6971	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco ASA and FTD	29 Apr 202100:00	–	ncsc
NVD	CVE-2021-1504	29 Apr 202118:15	–	nvd

NVD

Node

cisco firepower_threat_defenseRange6.5.0–6.6.4

cisco firepower_threat_defenseRange6.7.0–6.7.0.1

cisco adaptive_security_appliance_softwareRange9.7–9.8.4.35

cisco adaptive_security_appliance_softwareRange9.9–9.9.2.85

cisco adaptive_security_appliance_softwareRange9.10–9.12.4.10

cisco adaptive_security_appliance_softwareRange9.13–9.13.1.21

cisco adaptive_security_appliance_softwareRange9.14–9.14.2.4

cisco adaptive_security_appliance_softwareRange9.15–9.15.1.7

[
  {
    "product": "Cisco Adaptive Security Appliance (ASA) Software",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-vpn-dos-fpBcpEcD

21 Nov 2024 05:44Current

8High risk

Vulners AI Score8

CVSS 25

CVSS 3.17.5 - 8.6

EPSS0.00312

SSVC

CWE-787