Lucene search

K
cvelistCiscoCVELIST:CVE-2021-34704
HistoryJan 11, 2022 - 6:50 p.m.

CVE-2021-34704 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability

2022-01-1118:50:10
CWE-787
CWE-121
cisco
www.cve.org
4
cisco
asa software
firepower threat defense
web services
denial of service
vulnerability
unauthenticated
remote attacker
dos
input validation
https requests
exploit
device reload

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

8.2

Confidence

High

EPSS

0.002

Percentile

60.6%

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS requests. An attacker could exploit this vulnerability by sending a malicious HTTPS request to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

CNA Affected

[
  {
    "product": "Cisco Adaptive Security Appliance Software",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "6.4.0.13",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Cisco Firepower Threat Defense Software",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "6.6.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

8.2

Confidence

High

EPSS

0.002

Percentile

60.6%

Related for CVELIST:CVE-2021-34704