Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service Vulnerability (Cisco Cisco Adaptive Security Appliance (ASA) Software)

CVE-2021-34793

HIGH 8.6

En bref

Source: NVD
EPSS: EPSS 0.59 % · centile 48 (2026-10-30)
État: PUBLISHED
Publiée: 2021-10-27 18:56 UTC
Mise à jour: 2024-11-07 21:45 UTC
Attribuée par: cisco
Statut NVD: Modified

Rechercher sur…

Description

A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service (DoS) vulnerability. This vulnerability is due to incorrect handling of certain TCP segments when the affected device is operating in transparent mode. An attacker could exploit this vulnerability by sending a crafted TCP segment through an affected device. A successful exploit could allow the attacker to poison the MAC address tables in adjacent devices, resulting in network disruption.

Faiblesses (CWE)

CWE-924 — Contrôle insuffisant de l'intégrité des messages transmis sur un canal

Références

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-dos-JxYWMJyL

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.1	HIGH 8.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	cisco
CVSS 3.1	HIGH 8.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	NVD · psirt@cisco.com (Secondary)
CVSS 3.1	HIGH 8.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	NVD · nvd@nist.gov (Primary)
CVSS 2.0	MEDIUM 5.0	AV:N/AC:L/Au:N/C:N/I:N/A:P	NVD · nvd@nist.gov (Primary)

Références européennes

ENISA EUVD · EUVD-2021-21443
GCVE · GCVE-0-2021-34793

Avis du CERT-FR

CERTFR-2021-AVI-829 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

cpe:2.3:a:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:* < 9.8.4.40
cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:* < 6.4.0.13
cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:* ≥ 6.5.0 < 6.6.5
cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:* ≥ 6.7.0 < 6.7.0.3
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.9.0 < 9.12.4.29
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.13.0 < 9.14.3.9
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.15.0 < 9.15.1.17
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.16.0 < 9.16.2.3
cpe:2.3:o:cisco:asa_5512-x_firmware:009.008\(004.025\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5505_firmware:009.008\(004.025\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5515-x_firmware:009.008\(004.025\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5525-x_firmware:009.008\(004.025\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5545-x_firmware:009.008\(004.025\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5555-x_firmware:009.008\(004.025\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5580_firmware:009.008\(004.025\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:asa_5585-x_firmware:009.008\(004.025\):*:*:*:*:*:*:*

Produits affectés

Produit	Versions
Cisco · Cisco Adaptive Security Appliance (ASA) Software	affected n/a

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

⚠️ Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service Vulnerability (Cisco Cisco Adaptive Security Appliance (ASA) Software)