Lucene search

K
cvelistCiscoCVELIST:CVE-2021-1236
HistoryJan 13, 2021 - 12:00 a.m.

CVE-2021-1236 Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability

2021-01-1300:00:00
CWE-670
cisco
raw.githubusercontent.com
1

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.8%

Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network.

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.8%